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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



Personal Network Management (PNM) is a home network-based application and provides the home network-based 
management of Personal Network (PN) consisting of multiple devices belonging to a single user, as described in 
3GPP TS 22.259 [2] and 3GPP TS 23.259 [15]. 

The present document provides the protocol details for enabling Personal Network management (PNM) services in the 
IP Multimedia (IM) Core Network (CN) subsystem based on the protocols of XML Configuration Access Protocol 
(XCAP), Session Initiation Protocol (SIP) and the Session Description Protocol (SDP). 

The present document provides the protocol details for enabling Personal Network management (PNM) services in 
Circuit Switched (CS) domain based on the protocols of CAP, MAP, ISUP, USSD and BICC. 

The present document is applicable to User Equipment (UEs) and Application Servers (AS) providing PNM 
capabilities. 

The present document makes no PNM specific enhancements to SIP, SIP events or SDP specified in 

3GPPTS 24.229 [3]. 

The present document makes no PNM specific enhancements to CAP, MAP, ISUP, USSD and BICC. 
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3 Definitions, symbols and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions given in IETF RFC 4825 [6] apply. 

Application usage 

Application Unique ID (AUID) 

Document Selector 

Document URI 

Naming Conventions 

Node Selector 

Node Selector Separator 

Node URI 

XCAP client 

XCAP resource 

XCAP root 

XCAP root URI 

XCAP server 

XCAP User Identifier (XUI) 

For the purposes of the present document, the following terms and definitions given in 3GPP TS 22.085 [19] apply: 

Incoming Access (lA) 
Outgoing Access (OA) 
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For the purposes of the present document, the following terms and definitions given in 3GPP TS 22.259 [2] apply: 

Personal Areal Network (PAN) 
Personal Network (PN) 
Personal Network Element (PNE) 
PNE Identifier 



3.2 



Abbreviations 



For the purposes of the present document, the following abbreviations apply: 

ACM Address Complete Message 

ANM Answer Message 

AS Application Server 

BICC Bearer Independent Call Control 

BSF Bootstrapping Server Function 

CAMEL Customised Applications for Mobile network Enhanced Logic 

CAP CAMEL Application Part 

CCCF Call Continuity Control Function 

CN Core Network 

CS Circuit Switched 

CUG Closed User Group 

FQDN Fully Qualified Domain Name 

GBA Generic Bootstrapping Architecture 

GMSC Gateway MSC 

GRUU Globally Routable User Agent URI 

GSM Global System for Mobile communications 

HLR Home Location Register 

HSS Home Subscriber Server 

HTTP Hypertext Transfer Protocol 

lA Incoming Access 

lAM Initial Address Message 

lARI IMS Application Reference Identifier 

ICSI IMS Communication Service Identifier 

IDP Initial Detection Point 

IE Information Element 

IFC Initial Filter Criteria 

IM IP Multimedia 

IMEI International Mobile Equipment Identity 

IMS IM CN subsystem 

IP Internet Protocol 

ISDN Integrated Services Digital Network 

ISUP ISDN User Part 

MAP Mobile Application Part 

MGCF Media Gateway Control Function 

MS Mobile Station 

MSC Mobile Switching Centre 

MSISDN MS international PSTN/ISDN number 

NAF Network Application Function 

OA Outgoing Access 

P-CSCF Proxy Call Session Control Function 

PN Personal Network 

PNE Personal Network Element 

PNM Personal Network Management 

PSI Public Service Identity 

PSTN Public Switched Telephone Network 

S-CSCF Serving Call Session Control Function 

SDP Session Description Protocol 

SIP Session Initiation Protocol 

SRI Send Routing Information 

TLS Transport Layer Security 

UE User Equipment 
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URI Uniform Resource Identifier 

URN Uniform Resource Name 

USSD Unstructured Supplementary Service Data 

VLR Visitor Location Register 

XCAP XML Configuration Access Protocol 

XML Extensible Markup Language 

4 Overview of personal network management 

4.1 General 

PNM applications consist of the PN redirection service and the PN access control , both applying only to the 
terminating service, as described in 3GPP TS 22.259 [2] and 3GPP TS 23.259 [15]. The PN redirection is a PNM 
application that enables redirecting a session addressed to any of the UEs belonging to the PN to a certain UE or a 
certain PNE other than a PN UE of their PN, i.e., the default UE or default PNE other than a PN UE for terminating 
services. The PN access control is a PNM application that enables users to exercise PN access control to restrict 
accesses to certain UEs or certain PNEs other than PN UEs of their PN. The PN may consist of UEs which are only 
privately accessed, that is each UE may be accessed only by other UEs of the PN. The PN-User may additionally 
modify the access levels of each UE of the PN to be public or private. In this regard the PN behaves similar to a CUG as 
specified in 3GPP TS 22.085 [19] and 3GPP TS 23.085 [20], with Outgoing Access and whether Incoming Access is 
allowed for the PN UE is dependent on the PN access control list for that PN UE. 

In order to make the above happen, the following procedures are provided within this document: 

procedures for PN-registration are specified in clause 6; 

procedures for PN-configuration are specified in clause 7; 

procedures for PN-query are specified in clause 8; 

procedures for session redirection are specified in clause 9; and 

procedures for restricting access to certain UEs are specified in clause 10. 

4.2 Network capabilities 

In order to support the PNM services the following network capabilities are assumed: 

1) provision by the home network operator of PNM specific AS on the IM CN subsystem, as specified in 

3GPPTS 24.229 [3]; 

2) support of CAMEL phase-3 and USSD as specified in 3GPP TS 29.078 [13] and 3GPP TS 24.090 [14]. 



5 Functional entities 

5.1 Introduction 

5.2 User Equipment (UE) 

To be compliant with this document, a UE shall implement the role of a PN UE (see subclause 6.2, subclause 7.2, 
subclause 8.2, subclause 9.2 and subclause 10.2). 

The UE shall implement the XCAP client role as described in subclause 11.2.1. 

The UE shall implement HTTP digest authentication (see 3GPP TS 24.109 [5]). 

The UE shall implement Transport Layer Security (TLS) (see IETF RFC 2246 [4]). 
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The UE shall implement the GBA Function as described in 3GPP TS 33.220 [8]. 

The UE shall initiate a bootstrapping procedure with the bootstrapping server function (BSE) located in the home 
network, as described in 3GPP TS 24.109 [5]. 

5.3 Application Server (AS) 

The AS implementing PNM application shall implement the role of a XCAP server (see subclause 1 1.2.2). 

The AS implementing PNM application shall implement the Network Application Function (NAF) as described in 
3GPPTS 33.220 [8]. 

NOTE: For terminating services, the PNM Application in IM CN subsystem is the first Application Server of any 
Application Servers in the path of the call. 

The AS implementing PNM application shall remove g.3gpp.pne-id media feature tag containing IMEI included in the 
Contact header field of requests and responses of SIP methods other than the SIP REGISTER method prior to 
forwarding the request or response to the destination. 

5.4 Authentication Proxy 

The generic requirements for an authentication proxy are defined in 3GPP TS 24.109 [5]. 



Roles for PN-registration 



6.1 Introduction 

The PN-registration is the procedure where a UE is added to the PN, or a PNE is added to the PAN. As a result of a 
successful registration, the UE capabilities are conveyed to the PNM application. 

6.2 PN UE 

If a PN UE supports the PN controller functionality and is configured to act as a PN controller the PN UE shall include 
in the Contact header of the REGISTER request a g.3gpp.iari_ref feature tag containing the lARI value defined in 
subclause 10.4. 

Upon receiving a REGISTER request sent from a PNE other than a PN UE via the PAN internal interface, the PN UE 
shall initiate a SIP REGISTER request as defined in 3GPP TS 24.229 [3] subclause 5.1.1.2.1 with the following 
addition: 

1) including in the Contact header field a g.3gpp.pne-id media feature tag containing the PNE identifier defined in 
subclause 6.4. 

If using the multiple registrations mechanism for registering each PNE, the PN UE shall use a different "reg-id" value 
when registering the PNE. 

If using SIP re-registration procedures for registering another PNE, the PN UE includes a Contact header field for each 
registered PNE in the SIP REGISTER request. 

There are no PNM specific requirements for registration of the PN UE to the CS domain. 
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6.3 PNM Application 

6.3.1 PN-registration procedure in the IIVI CN subsystem 

The PNM AS can be configured with any of various options for obtaining information from the IM CN subsystem 
specified in 3GPP TS 24.229 [3], 3GPP TS 29.328 [9] and 3GPP TS 29.329 [12], for example: 

a) receipt of REGISTER request which causes a third-party REGISTER request containing in the body the 
incoming REGISTER request from the PN UE and the 200 (OK) response to the incoming REGISTER request 
to be sent to the PNM application. The PNM application may then obtain information from the body of the third- 
party REGISTER request; 

b) receipt of REGISTER request which causes a third-party REGISTER request containing in the body a <service- 
info> element containing the private user identity of the PN UE to be sent to the PNM application. The PNM 
application may then subscribe to the reg event package for that user to obtain information; or 

c) receipt of REGISTER request which causes a third-party REGISTER request containing in the body a <service- 
info> element containing the private user identity of the PN UE to be sent to the PNM application. The PNM 
application may then use the Sh interface to obtain information. 

This document places no requirement on the use of all or any of these mechanisms. 

After successful PN-registration, the PNM AS shall enrol the public user identity of the registered PN UE or the 
registered PNE identifier in the data base. 

6.3.2 PN-registration procedure in tine CS domain 

When the gsmSCF (CAMEL service for PNM) receives a MAP_NOTE_MM_EVENT message sent from the VLR to 
report that the status of the UE set to "attached", the gsmSCF sets the UE registration status in the PN to "registered" 
and sends the UE status to the PNM AS. 

NOTE: The interface between the gsmSCF and the PNM AS is unspecified. 

When the gsmSCF (CAMEL service for PNM) receives a MAP_NOTE_MM_EVENT message sent from the VLR to 
report that the status of the UE set to "detached", the gsmSCF sets the UE registration status in the PN to "deregistered" 
and checks whether the PN UE was the only default UE in the PN. If it was the only default UE in the PN, the gsmSCF 
generates a USSD Notify message to the HSS to inform the user. 

6.4 Definition of media feature tag g.3gpp.pne-id 

Media feature-tag name: g.3gpp.pne-id 

ASN.l Identifier: 1.3.6.1.8.2.x 

Editor's note: The ASN. 1 Identifier will need to be updated once the lANA registration is completed. 

Summary of the media feature indicated by this tag: This media feature-tag when used in a SIP request or a SIP 
response indicates the identifier of a PNE other than a UE. 

Values appropriate for use with this feature-tag: URN. When an IMEI is available, the URN shall take the form of a 
IMEI URN (see draft-montemurro-gsma-imei-urn [22]). If no IMEI is available, the URN shall take the form of a string 
representation of a UUID as a URN as defined in IETF RFC 4122 [23]. 

The feature-tag is intended primarily for use in the following applications, protocols, services, or negotiation 
mechanisms: This feature-tag is most useful in a communications application, for describing the capabilities of a device, 
such as a PC or PDA. 

Examples of typical use: Indicating the identifier of a device which is part of a Personal Area Network. 

Related standards or documents: 3GPP TS 24.259: "Personal Network Management (PNM), stage 3". 

Security Considerations: 
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UE is not allowed to include g.3gpp.pne-id media feature tag containing IMEI in the Contact header field of requests 
and responses of SIP methods other than the SIP REGISTER method except when the request or response is guaranteed 
to be sent to a trusted intermediary that will remove the g.3gpp.pne-id media feature tag prior to forwarding the request 
or response to the destination. Other security considerations for this media feature-tag are discussed in subclause 12.1 of 
IETF RFC 3840 [21]. 



Roles for PN-configuration 



7.1 Introduction 

This clause specifies the PN-configuration and PN-deconfiguration procedures for supporting PN UE redirection, PN 
access control and PN UE name changing. 

NOTE: A text string together with angled brackets (e.g. <PNUEName>) represents an XML element defined by 
the XML schema in Annex B. 

Subclause A. 3 provides examples of signalling flows for PN-configuration and PN-deconfiguration. 

7.2 PN UE 

In order for the PN UE to initiate the PN-configuration procedure for creating/replacing or deleting an XML document, 
an element within an XML document or an attribute of an element within an XML document, the PN UE shall know the 
data structure and constraints defined by the PNM XML schema in annex B. The PN UE shall also know what HTTP 
URI to use based on the naming conventions for constructing the HTTP URIs described in annex C. 

The PN UE initiates the PN-configuration procedure or the PN-deconfiguration procedure by sending a HTTP PUT 
request or a HTTP DELETE request message with: 

Request-URI field indicating to the PNM application the desired location where the XML document, an element 
within an XML document or an attribute of an element within an XML document which is requested to be 
configured as follows: 

if the PN-configuration procedure performed for configuring an XML document, the Request-URI is 
constructed with a document URI pointing to the XML document; 

if the PN-configuration procedure performed for configuring an element within an XML document, the 
document selector of the Request-URI is constructed with a document URI pointing to the XML document 
containing the element to be configured, and the node selector of the Request-URI with a node URI 
identifying the element to be configured; 

if the PN-configuration procedure performed for configuring an attribute of an element within an XML 
document, the document selector of the Request-URI is constructed with a document URI pointing to the 
XML document containing the element to be queried and the node selector of the Request-URI with a node 
URI identifying the attribute to be configured; 

Host field indicating the Internet host and port number of the PNM application; 

User-Agent field containing information about the user agent originating the request and the static string (e.g. 
3gpp-gba) to indicate to the NAF that the UE supports 3GPP -bootstrapping based authentication; 

Referer field indicating the address (URI) of the resource from which the URI for the PNM application is 
obtained; 

Authorization field containing the credentials obtained by means of executing the bootstrapping procedure with 
the BSE as described in 3GPP TS 33.220 [8]; 

Content-Type field indicating 

"application/pnm-Hxml", if the PN-configuration is performed for configuring an XML document; 
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"application/xcap-el+xml" as in IETF RFC 4825 [6], if the PN-configuration is performed for configuring an 
element within an XML document; 

"application/xcap-att+xml" as in IETF RFC 4825 [6], if the PN-configuration is performed for configuring an 
attribute of an element within an XML document; 

If the PN-configuration is performed for creating/replacing the XML document for the PN UE redirection purpose, the 
XML body of the HTTP PUT request message shall contain: 

the <RedirectedUserID> containing the children <PNUEID> and <PNUEName>, and the <RedirectingUserID> 
with a unique value for the "id" attribute containing the children <PNUEID> and <PNUEName>, as well as the 
<RedirectionLevel> and the <RedirectionPrio>; 

NOTE: A PN user decides the value of the <RedirectionLevel> element based on the PN UE capabilities. 

According to the requirements of 3GPP TS 22.259 [2], this document supports three values (a global level 
for all services, a service level for selected services and a service component level for different media). 

the value of the "UriOfRedirectedUser" attribute for the <UERedirection> shall be populated with the public 
user identity of the PN UE configured by the PN UE to be redirected and indicated by the <RedirectedUserID>. 

If the PN-configuration is performed for creating/replacing the XML document for the PNE redirection purpose, the 
XML body of the HTTP PUT request message shall contain: 

- the <RedirectedUserID> containing the children <PNUEID>, <PNEID> and <PNEName>, and the 
<RedirectingUserID> with a unique value for the "id" attribute containing the children <PNEID> and <PNEName>, 
as well as the <RedirectionLevel> and the <RedirectionPrio>; 

NOTE: A PN user decides the value of the <RedirectionLevel> element based on the PNE capabilities. According 
to the requirements of 3GPP TS 22.259 [2], this document supports three values (a global level for all 
services, a service level for selected services and a service component level the different media). 

- the value of the "UriOfRedirectedUser" attribute for the <PNERedirection> shall be populated with the GRUU 
of the PNE configured by the PNE to be redirected and indicated by the <RedirectedUserID>. 

If the PN-configuration is performed for creating/replacing the XML document for the PN access control purpose, the 
XML body of the HTTP PUT request message shall contain: 

the <ControllerUE> containing the children <PNUEID> and <PNUEName>, the <ControlleeUE> with a unique 
value for the "id" attribute containing children <PNUEID> and <PNUEName>, and the <PNAccessControlList> 
and <PNAccessControlType>; 

the value of the "UriOfControllerUE" attribute of the <AccessControl> shall be populated with the public user 
identity of the controller UE indicated by the <ControllerUE>. 

If the PN-configuration is performed for creating/replacing the XML document for the PNE access control purpose, the 
XML body of the HTTP PUT request message shall contain: 

- the <ControllerUE> containing the children <PNUEID> and <PNUEName>, the <ControlleePNE> with a 
unique value for the "id" attribute containing children <PNUEID>, <PNEID> and <PNEName>, and the 
<PNAccessControlList> and <PNAccessControlType>; 

the value of the "UriOfControllerUE" attribute of the <AccessControl> shall be populated with the public user 
identity of the controller UE indicated by the <ControllerUE> 

NOTE: The PNE here stands for the PNE other than a PN UE, i.e. ME, MT or TE of a PAN. 

If the PN-configuration is performed for the PN UE name changing purpose, and if the PN UE does not know the value 
of the "id" attribute of the <UEName> to be changed, the UE shall first initiate the PN-query procedure as specified in 
clause 8 in order to cache a copy of the XML document containing the value of the "id" attribute of that 
<UEName>.The XML body of the HTTP PUT request message shall contain: 

the <PNUEID> identified by the shared public user identity, the <UEName> containing an "id" attribute with the 
attribute value pointing to the <UEName> to be changed and the <Name> to be changed. 

If the PN-configuration is performed for configuring an element within an XML document, the XML body of the HTTP 
request message shall contain: 
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the XML element to be configured. 

If the PN-configuration is performed for configuring an attribute of an element within an XML document, the XML 
body of the HTTP request message shall contain: 

the value of the attribute of an element to be configured. 

7.3 PNM application 

In order for the PNM application to support the PN-configuration procedure for creating/replacing or deleting an XML 
document, an element within an XML document or an attribute of an element within an XML document, the PNM 
application shall know the data structure and constraints imposed by the PNM XML schema in annex B. The PNM 
application shall also be configured to be able to handle the HTTP URIs described in annex C. 

Upon receiving a HTTP PUT request or a HTTP DELETE request message, the PNM application verifies the 
Authorization header by using the bootstrapping transaction identifier B-TID and the key material Ks_NAF obtained 
from the BSF (as described in 3GPP TS 33.220 [8]). If the verification succeeds, the PNM application obtains the 
private user identity associated with the received public user identity. The PNM application then authorizes the PN UE 
by comparing the received public user identity with the preconfigured one identified by the private user identity. 

If the authorization succeeds, the PNM application shall perform the requested action and generate a response in 
accordance with IETF RFC 4825 [6]. 



8 Roles for PN-query 

8.1 Introduction 

This clause specifies the PN-query procedure. 

Annex A. 3 provides examples of signalling flows for PN-query. 

8.2 PN UE 

In order for the PN UE to initiate the PN-configuration procedure for querying an XML document, an element within an 
XML document or an attribute of an element within an XML document, the PN UE shall know the data structure and 
constraints defined by the PNM XML schema in annex B. The PN UE shall also know what HTTP URI to use based on 
the naming conventions for constructing the HTTP URIs described in annex C. 

The PN UE initiates the PN-query procedure by sending a HTTP GET request message with: 

Request-URI field indicating to the PNM application the desired location of an XML document, an element 
within an XML document or an attribute of an element within an XML document which is queried as follows: 

if an XML document is queried, the Request-URI is constructed with a document URI pointing to the XML 
document; 

if an element within an XML document is queried, the document selector of the Request-URI is constructed 
with a document URI pointing to the XML document containing the element to be queried and the node 
selector of the Request-URI with a node URI identifying the element to be queried; 

if an attribute of an element within an XML document is queried, the document selector of the Request-URI 
is constructed with a document URI pointing to the XML document containing the element to be queried and 
the node selector of the Request-URI with a node URI identifying the attribute to be queried. 

Host field indicating the Internet host and port number of the PNM application; 

User-Agent field containing information about the user agent originating the request and the static string (e.g. 
3gpp-gba) to indicate to the NAF that the UE supports 3GPP -bootstrapping based authentication; 
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Referer field indicating the address (URI) of the resource from which the URI for the PNM apphcation is 
obtained; 

Authorization field containing the credentials obtained by means of executing the bootstrapping procedure with 
the BSF as described in 3GPP TS 33.220 [8]. 



8.3 PNM application 



In order for the PNM application to support the PN-configuration procedure for querying an XML document, an 
element within an XML document or an attribute of an element within an XML document, the PNM application shall 
know the data structure and constraints imposed by the PNM XML schema in annex B. The PNM application shall also 
be configured to be able to handle the HTTP URIs described in annex C. 

Upon receiving a HTTP GET request message, the PNM application verifies the Authorization header by using the 
bootstrapping transaction identifier B-TID and the key material Ks_NAF obtained from the BSF (as described in 
3GPP TS 33.220 [8]). 

If the verification succeeds, the PNM application shall perform the requested action and generate a response in 
accordance with IETF RFC 4825 [6] with an XML body containing either the XML document, or the element within an 
XML document or the attribute of an element within an XML document as queried by the PN UE. 



9 Roles for PN redirection 

9.1 Introduction 

The PN redirection redirects sessions containing in the Request-URI the address of any UEs of a PN to the default UE 
or the default PNE other than a PN UE of the same PN as described in 3GPP TS 22.259 [2] and in 
3GPPTS 23.259 [15]. 

9.2 PN UE 

There is no PNM specific requirement for the PN UE redirection. 

Upon receiving a SIP INVITE request containing in the Request-URI the address of a PNE, the UE shall forward the 
SIP INVITE request to the PNE via the PAN internal interface. 

NOTE: The PAN internal interface is out of scope of this document. 

9.3 PNM application 

9.3.1 PN UE redirection procedure in the IM CN subsystem 

When the PNM AS receives an initial request containing in the Request-URI the address of a UE or a PNE other than a 
PN UE that exists in the PN configuration due to the terminating initial filter criteria, the PNM AS shall verify if the 
address in the Request-URI exists in a <RedirectingUserID> element in the PN configuration. If there is a matching 
<RedirectingUserID> element the PNM AS shall send an initial request of the same SIP Method on a new dialog to the 
URI contained in the <RedirectedUserID> element. The PNM AS then routes the initial request based on the standard 
call setup procedures as specified in 3GPP TS 24.229 [3]. 

NOTE: The PNM AS is triggered first by forming the initial filter criteria in the S-CSCF. 

The PNM AS shall include in the request the following: 

a) a Request-URI set to the SIP URI contained in the <RedirectedUserID> element (e.g. a public user identity or a 
GRUU); 

b) a From header set to the SIP URI of the PNM AS; 
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c) a To header set to the URI contained in the <RedirectedUserID> element; 

d) a P-Asserted-Identity header set to the contents of the P-Asserted-Identity header in the original initial request; 

e) a Contact header set to the IP address or FQDN of the PNM AS; 

f) a Supported header containing the option tags from the original initial request with the addition of the option tag 
"histinfo"; 

g) a History-Info header that includes as the Targeted-to-URI the URI from the Request-URI of the original initial 
request, and as the next branch index URI, the contents of the Request-URI of this request. 

h) a Accept-Contact header with a g.3gpp.pne-id media feature tag containing the PNE identifier or media feature 
tag containing the requested device capabilites along with the parameters "require" and "explicit". 

If the PNM AS receives in response a 4xx, 5xx or 6xx response, and there exist more <RedirectedUserID> elements in 
the PN configuration which have not had the request forwarded to them yet, then the PNM AS shall send an initial 
request of the same SIP Method on a new dialog to the URI of the UE or the PNE other than a PN UEcontained in the 
next lower priority <PNController> element as above. 

Otherwise, if there does not exist more <RedirectedUserID> elements in the PN configuration which have not had the 
request forwarded to them yet, then the PNM AS shall forward the response back towards the originator of the initial 
request. 

If the PNM AS receives in response a 200 (OK) response, the PNM AS shall forward the response back towards the 
originator of the initial request. 

9.3.2 PN UE redirection procedure in tine CS domain 

When the PNM application receives an indication that the gsmSCF has received a CAMEL IDP relating to a 
terminating call, the PNM application shall: 

1) check if the re-direction is applicable for the call on the basis of service key and called party number received in 
CAMEL IDP message. 

2) if the call is not subject to re-direction, cause the gsmSCF to respond with a CAMEL CONTINUE and no further 
PNM specific procedures are performed on this call. 

3) if the call is subject to re-direction, retrieve the Destination Routing Address. 

4) if the call is subject to re-direction, cause the gsmSCF to respond with a CAMEL CONNECT message with the 
Destination Routing Address set to the MSISDN of default UE. 

When the PNM application receives an indication that the gsmSCF has received a EventReportBCSM message 
indicating that the default UE cannot setup the session/call, the PNM application shall: 

1) retrive the Destination Routing Address of the other UE of the next lower priority based on the PN- 
configuration. 

2) cause the gsmSCF to respond with a CAMEL CONNECT message with the Destination Routing Address set to 
the MSISDN of the selected UE. 

3) if there are no more UEs selected for redirection, cause the gsmSCF to respond with a CAMEL CONTINUE 
and no further PNM specific procedures are performed on this call. 



1 Roles for PN access control 
10.1 Introduction 

The PN access control procedure enables the controller UE to exercise access control to restrict accesses to certain PN 
controllee UE(s) of the PN, or certain controllee PNE(s) other than the UE as described in 3GPP TS 23.259 [15]. 
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10.2 PNUE 

When the PN UE that supports the PN controller functionality and that is configured to act as a PN controller receives 
an initial request containing an Accept-Contact header containing a g.3gpp.iari_ref feature tag containing the lARI 
value defined in subclause 10.4 and a target URI-parameter in the Request-URI, then the PN UE shall perform the PN 
controller function and indicate to the user that the PN controller UE has received a request for the PN controllee UE, 
otherwise the PN UE shall not perform the PN controller function and shall follow the UE terminating case procedures 
in3GPPTS24.229[3]. 

When performing the PN controller function the PN UE shall: 

a) indicate the PN controllee UE indicated by the URI in the target URI-parameter contained in the Request-URI; 

b) indicate the identity of the originating user indicated in the P-Asserted-Identity header. 
The PN UE may offer the user the following options: 

a) allow the request to be forwarded to the PN controllee UE; 

b) deny the request (i.e reject the session); 

c) accept the request (i.e establish the session). 

When allowing the request to be forwarded to the PN controllee UE the PN UE shall send a 302 (Moved Temporarily) 
response. In the 302 (Moved Temporarily) response the PN UE shall: 

a) include a Contact header containing the URI from the target URI-parameter in the Request-URI of the incoming 
request; 

b) include a History-Info header copied from the incoming request unless the user wishes not to reveal to the user 
of the PN controllee UE that the request was forwarded first to the PN controller UE. 

When the user allows the request to be forwarded to the PN controllee UE the PN UE may allow the user to add the 
URI from the P-Asserted-Identity header to a <PNAccessControlList> using the procedure in subclause 7.2. 

When denying the request to be forwarded to the PN controllee UE the PN UE shall send either: 

a) a 480 (Temporarily Unavailable) response if the user wishes to not allow the PN controllee UE to receive 
requests from the originator at this time but may allow requests at some future time; 

b) a 410 (Gone) response if the user wishes to not allow the PN controllee UE to receive requests from the 
originator at any time but wishes the originator to not know that the request was actively blocked; or 

c) a 403 (Forbidden) response if the user wishes to not allow the PN controllee UE to receive requests from the 
originator at any time and wishes the originator to know that the request was actively blocked. 

The PN UE should only send a 480 (Temporarily Unavailable) response to the PN controller request when the user has 
specifically denied the request as this will prevent the request being forwarded to other PN controller UEs. When the 
user allows the request to be forwarded to the PN controllee UE the PN UE may allow the user to add the URI from the 
P-Asserted-Identity header to a <PNAccessControlList> using the procedure in subclause 7.2. 

When the user accepts the request the PN UE shall follow the procedures in 3GPP TS 24.229 [3]. 

When a PN UE that does not support the PN controller functionality or that is not configured to act as a PN controller 
(i.e a PN controllee UE) receives an initial request the PN UE shall follow the UE terminating case procedures in 

3GPPTS 24.229 [3]. 

10. 2A PN UE procedures supporting PNE access control 

When the controllee is the PNE(s) other than the UE, the PN UE procedures in subclause 10.2 apply except that the 
references to "PN controllee UE" are replaced by "controllee PNE". 
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10.3 PNM application 

10.3.1 PN access control procedure in the IIVI CN subsystem 

When the PNM AS receives an initial request containing in the Request-URI the address of a PN UE within the same 
PN as the originating PN UE the PNM AS shall allow the request to continue normally. 

When the PNM AS receives an initial request from a UE that is not a member of the same PN as the PN UE that's 
address is contained in the Request-URI and the PN Access Control is not enabled the PNM AS shall return a 403 
(Forbidden) response. 

When the PNM AS receives an initial request from a UE that is not a member of the same PN as the PN UE that's 
address is contained in the Request-URI and the address in the Request-URI exists in a <PNController> element in the 
PN access control list the PNM AS shall allow the request to continue normally. 

When the PNM AS receives an initial request due to the terminating initial filter criteria, from a UE that is not a 
member of the same PN as the PN UE that's address is contained in the Request-URI and the address in the Request- 
URI exists in a <PNControllee> element in the PN access control list the PNM AS shall verify if the address in the P- 
Asserted-Identity exists in a <PNAccessControlList> element in the PN access control list. 

NOTE: The PNM AS is triggered first by forming the initial filter criteria in the S-CSCF. 

If there is a matching <PN AccessControlList> element the PNM AS shall allow the request to continue normally. 

If there is no matching <PNAccessControlList> element the PNM AS shall send an initial request of the same SIP 
Method on a new dialog to the URI of the PN controller UE contained in the <PNController> element if it exists. If no 
<PNController> element exists then the PNM AS shall return a 403 (Forbidden) response. When sending the initial 
request to the PN controller UE the PNM AS shall include in the request the following: 

a) a Request-URI set to the SIP URI contained in the <PNController> element along with a target URI-Parameter 
as defined in IETF RFC 4458 [17] set to the URI from the Request-URI of the original initial request; 

b) a From header set to the SIP URI of the PNM AS; 

c) a To header set to the URI contained in the <PNController> element; 

d) a P-Asserted-Identity header set to the contents of the P-Asserted-Identity header in the original initial request; 

e) a Contact header set to the IP address or FQDN of the PNM AS; 

f) a Supported header containing the option tags from the original initial request with the addition of the option tag 
"histinfo"; 

g) a History-Info header that includes as the Targeted-to-URI the URI from the Request-URI of the original initial 
request, and as the next branch index URI, the contents of the Request-URI of this request including the target 
URI-parameter along with the index parameters as specified in IETF RFC 4244 [16]; 

h) an Accept-Contact header containing the g.3gpp.iari_ref feature tag containing the lARI value <urn:urn-7:3gpp- 
application.ims.iari.PNM-Controller>. 

If the PNM AS receives in response a 302 (Moved Temporarily) response the PNM AS shall redirect the original 
incoming request to the URI contained in the Contact header of the 302 (Moved Temporarily) response. The PNM AS 
shall add to the request the following: 

a) a Request-URI set to the SIP URI contained in the Contact header of the 302 (Moved Temporarily) response; 

b) a Supported header containing the option tags from the original initial request with the addition of the option tag 
"hist-info"; 

c) a History-Info header that includes the URIs from the History-Info header in the 302 (Moved Temporarily) 
response along with the contents of the Request-URI of this request as the next branch index URI under the top 
level Targeted-to-URI, along with the appropriate index parameter as specified in IETF RFC 4244 [16], if the 
302 (Moved Temporarily) response contains a History-Info header; 
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If the PNM AS receives in response a 4xx (other than a 403 (Forbidden) response or 410 (Gone) response or 480 
(Temporarily Unavailable) response), 5xx or 6xx response and there exist more <PNController> elements in the PN 
access control list which have not had the request forwarded to yet, then the PNM AS shall send an initial request of the 
same SIP Method on a new dialog to the URI of the PN controller UE contained in the <PNController> element as 
above except that the History-Info header shall include the URls from the History-Info header in the 302 (Moved 
Temporarily) response and as the next branch index URI, the contents of the Request-URl of this request including the 
target URI-parameter along with the index parameters as specified in IETF RFC 4244 [16]; 

Otherwise, if there do not exist more <PNController> elements in the PN access control list which have not had the 
request forwarded to yet, then forward the response back towards the originator of the initial request. 

If the PNM AS receives in response a 200 (OK) response, a 403 (Forbidden) response, a 410 (Gone) response or 480 
(Temporarily Unavailable) response the PNM AS shall forward the response back towards the originator of the initial 
request. 

10.3.2 PN access control procedure in the CS domain 

When the PNM application receives an indication that the gsmSCF has received a CAMEL IDP message related to a 
terminating call, the PNM application shall: 

1) check if access control is applicable on the basis of the service key and called party number received in the 
CAMEL IDP message. 

2) if the call is not subject to access control, cause the gsmSCF to respond with a CAMEL CONTINUE and no 
further PNM specific procedures are performed on this call. 

3) if the call is subject to access control, it causes the gsmSCF to perform as follows: 

a) check if the calling party is configured in the PN access control list. 

b) if the calling party is configured in the PN access control list, cause the gsmSCF to respond with a CAMEL 
CONTINUE message to the GMSC. 

c) if the calling party is not configured in the PN access control list, cause the gsmSCF to generate the USSD 
request message to the controller UE. 

4) based on the controller" s response cause the gsmSCF to respond with a CAMEL CONTINUE message or a 
CALL RELEASE message to the GMSC. 

10.4 PNM controller IMS application reference identifier 

The URN used to define the lARI for the PNM controller application: value urn:urn-7:3gpp-application.ims.iari.pnm- 
controller. The URN is registered at http://www.3gpp.com/Uniform-Resource-Name-URN-list.html. 

Summary of the URN: This URN indicates that the device supports the PNM controller application 

The URN is intended primarily for use in the following applications, protocols, services, or negotiation mechanisms: 

This URN is most useful in a communications application, for describing the capabilities of a device, such as a 
phone or PDA. 

Examples of typical use: Indicating that a mobile phone supports the PNM controller application. 

Related standards or documents: 

- 3GPP TS 24.259: "Personal Network Management (PNM), stage 3" 
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1 1 Protocol at the Ut reference point 

11.1 Introduction 

The XML Configuration Access Protocol (XCAP) is used to create, read, write, modify and delete data related to the 
PNM service. XCAP uses the HTTP methods PUT, GET and DELETE for communication over the Ut reference point. 

1 1 .2 Roles 

11.2.1 XCAP client 

The XCAP client is a logical function as defined in IETF RFC 4825 [6]. The XCAP client provides the means to create, 
read, write, modify and delete the data used for the PNM services. In doing so, it shall generate an HTTP PUT, or an 
HTTP GET or an HTTP DELETE request in accordance with IETF RFC 2616 [7] and 3GPP TS 24.623 [18]. 

1 1 .2.2 XCAP server 

The XCAP server is a logical function as defined in IETF RFC 4825 [6]. The XCAP server stores all data relevant for 
the PNM services. When the XCAP server receives an HTTP PUT, HTTP GET or HTTP DELETE request for 
manipulating the data base, the XCAP server shall first authenticate the request in accordance with 3GPP TS 24.109 [5] 
and then perform authorization. Afterwards the XCAP server shall perform the requested action and generate a response 
in accordance with IETF RFC 2616 [7] and 3GPP TS 24.623 [18]. 
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Annex A (informative): 
Example signalling flows 

A.1 Scope of signalling flows 

This annex gives examples of signalling flows for Personal Network Management based on XCAP, the Session 
Initiation Protocol (SIP) and SIP Events. 

These signalling flows provide detailed signalling flows, which expand on the overview information flows provided in 
3GPPTS 23.259 [15]. 



A.2 Introduction 
A.2.1 General 

The signalling flows provided in this annex follow the methodology developed in 3GPP TS 24.228 [10]. The following 
additional considerations apply: 

a) 3GPP TS 24.228 [10] shows separate signalling flows with no configuration hiding between networks, and with 
configuration hiding between networks. There is no personal network management specific functionality 
associated with this hiding, and therefore such separate signalling flows are not shown in the present document; 

b) 3GPP TS 24.228 [10] does not show the functionahty between the S-CSCF and the AS. As personal network 
management depends on the functionality provided by various AS, the signalling flows between S-CSCF and AS 
are shown in the present document; 

c) 3GPP TS 24.228 [10] breaks down the functionality of the various CSCFs. Such intervening activity in the 
CSCFs is in general not relevant to showing the functionality within personal network management, and 
therefore the CSCFs are often collapsed into a single entity labelled "Intermediate IM CN subsystem entities"; 

d) where entities are combined as in c) above, and the signalling flow is directed to such a combined entity, the 
contents of the signalling flow represent the contents of the sending entity except when otherwise stated; 

e) where entities are combined as in c) above and the signalling flow originates at such a combined entity, the 
contents of the signalling flow represent the contents of the receiving entity except when otherwise stated; 

f) within the CS domain, both ISUP and BICC can be used. The signalling flows represent only the ISUP 
signalling flows, and the BICC signalling flows (which can be assumed to be similar with no additional PNM 
specific content) are not shown; and 

g) additional functionality from 3GPP releases 6, 7 and 8 over and above that shown in 3GPP TS 24.228 [10] is 
incorporated in these. 

A.2. 2 Key required to interpret signalling flows 

The key to interpret signalling flows specified in 3GPP TS 24.228 [10] subclauses 4.1 and 4.2 applies with the additions 
specified below: 

Consistent with the conventions used in 3GPP TS 24.228 [10] homel.net is used for the home network of the 
originating user and home2.net is used for the home network of the terminating user. In registration and 
configuration flows the PN UE and PNM network elements are considered to be in homel.net, however in 
scenarios such as PN redirection and PNM access control where the PNM elements are in the terminating 
network the PN UE and PNM network elements are considered to be in home2.net. Therefore in some flows 
identities shown as home2.net are equivalent to the identities shown as homel.net in other flows and as 
described further below. 
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For signaling flows for PN-registration (see subclause A. 3. 2) and PN-configuration (see subclause A.3.3) the following 
applies: 

pnmas.homel .net: 1234 represents the Internet host and port number of the PNM AS, which can be obtained by a 
PN UE from the address (URI) of the resource http://pnmas.homel.net:1234/service. 

PN_userl_publicl @homel.net, PN_userl_public2@homel.net, etc. represent the public user identities 
configured for a PN-user for the PN UE#1. PN_user2_publicl @homel.net, PN_user2_public2@homel.net, etc. 
represent the public user identities configured for a PN-user for the PN UE#2, etc. PN_user_public@homel.net 
represents the shared public user identity. 

PN_userl_private@homel.net represents the private user identity configured for a PN-user for PN UE#1. 
PN_user2_private@homel.net represents the private user identity configured for a PN-user for PN UE#2, etc. 

PN_userl_friend_publicl @homel.net, PN_userl_friend_public2@homel.net etc represent the public user 
identities of a PN access control list configured for PN UE#1. PN_user2_friend_publicl @homel.net, 
PN_user2_friend_public2@homel.net etc represent the public user identities of a PN access control list 
configured for PN UE#2, etc. 

PN_userl_publicl_old and PN_userl_publicl_new represent the old and the new PN UE names related to the 
public user identity PN_userl_publicl@homel.net, PN_user2_publicl_old and PN_user2_publicl_new 
represent the old and the new PN UE names related to the public user identity PN_user2_publicl @homel.net. 

For signaling flows for PN UE redirection (see subclause A. 3.4), PN access control (see subclause A.3.5) and inter- 
domain networking (see subclause A.3.6) the following applies: 

PN_userl_public@home2.net, PN_user2_public@home2.net, etc. represent the public user identities for the PN 

UEs; 

userl_publicl @homel .net represents a user outside of the personal network originating a session to a user 
within the personal network. 

In order to differentiate between messages for HTTP, SIP, Diameter and media flows over CS and PS connections, the 
notation in figure A. 2. 2-1 is used. 



GET 



-O HTTP message 



INVITE 



Diameter message 
-► SIP message 



SETUP 



CS message 
Media over a PS connection 



Media over a CS connection 



Figure A.2.2-1 : Signalling flow notation 
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A.3 Signalling flows 
A.3.1 Introduction 

The signalling flows demonstrate how the PN-registration, PN-configuration, PN UE redirection and PN access control 
procedures work. The following signalling flows are included: 

subclause A. 3. 2. 1 shows the successful PN-registration in the IM CN subsystem using third party registration; 

subclause A. 3. 2.2 shows the successful PN-registration with subscription to reg event package; 

subclause A. 3. 3.1 shows the successful PN-configuration for PN UE redirection; 

subclause A. 3. 3. 2 shows the successful PN-configuration for PN access control; 

subclause A. 3. 3. 3 shows the successful PN-configuration for changing PN UE name; 

subclause A. 3. 3.4 shows the successful PN-query; 

subclause A. 3. 3. 5 shows the successful PN-deconfiguration; 

subclause A. 3. 4. 1 shows the successful PN UE redirection in the IM CN subsystem; 

subclause A. 3. 4.2 shows the successful PN UE redirection in the CS domain; 

subclause A. 3. 5.1 shows the successful PN access control procedure in IM CN subsystem; 

subclause A. 3. 5. 2 shows the successful PN access control procedure in CS domain; 

subclause A. 3. 6.1 shows the successful interdomain networking (IM CN subsystem to CS domain); 

subclause A. 3. 6.2 shows the successful interdomain networking (CS domain to IM CN subsystem). 

A.3. 2 Signalling flows for PN-registration 

A.3. 2.1 PN-registration in tine IM CN subsystem using tinird party registration 

Figure A.3. 2. 1-1 details the signalling flows for a successful PN-registration in the IM CN subsystem using third party 
registration. In this scenario the PN UE also performs the PN controller function. 
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UE 




S-CSCF 



1. REGISTER 



PNMAS 



HSS 



2. Cx S-CSCF registration notification 



4. REGISTER 



5. 200 (OK) 



6. Sh-Pull 



7. Sh-Pull Resp 



Figure A.3.2.1-1 : Successful PN-registration signalling: in the IM CN subsystem using third party 

registration 

1. REGISTER request (FN UE to IM CN subsystem entities) 

The PN UE initiates a REGISTER request after successful authentication. 

Table A.3.2.1-1 : REGISTER request (PN UE to IM CN subsystem entities) 

REGISTER sip: registrar. homel.net SIP/2.0 

Via: SIP/2. 0/UDP icscf l_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2. 0/UDP 
pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, SIP/2 . 0/UDP 
[5555 : : aaa : bbb : ccc :ddd] : 1357;comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path: <VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl .net : 13 3 7; lr;ob> 
Require: path 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023 551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp> ; reg-id=l ; 
+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp .icsi-ref= 'urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" ; 
+g. 3gpp . iari-ref ="urn%3Aurn-7%3A3gpp-application. ims . iari .pnm-controller" ; 
+g. 3gpp . cs-audio; 
+g. 3gpp . cs-video; 
expires=600000 

Call -ID: apb0 3aOs0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=base64 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="6 62 9f ae4 93 93a0 5 3 974 5 978 5 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

NOTE: the above REGISTER request contents are shown as received at the S-CSCF not as sent by the PN UE. 

2. Cx: S-CSCF registration notification procedure 
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There is no PNM specific content to this, for detailed message flows see 3GPP TS 29.228 [11] in 
subclause 6.1.2. 

3. SIP 200 (OK) response (IM CN subsystem entities to PN UE) 

4, REGISTER request (S-CSCF to PNM AS) 

After the PN UE successfully registered in the IM CN subsystem, the S-CSCF sends a third party REGISTER 
request containing in the body the incoming REGISTER request from the PN UE and the 200 (OK) response to 
the incoming REGISTER request to the PNM AS based on the initial filter criteria it received which contains an 
Include Register Request XML element and an Include Register Response XML element. 

Table A.3.2.1-4: REGISTER request (S-CSCF to PNM AS) 

REGISTER sip: pnmas .homel .net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ;branch=z9hG499ffhy 

Max- Forwards : 70 

From: <sip : scscfl . homel . net> ; tag=538ya 

To: <sip: PN_userl_publicl@homel.net > 

Call-ID: lasdaddlrf jflslj40a222 

Contact: <sip : scscfl .homel .net>; expires=600000 

CSeq: 87 REGISTER 

Content-Type : multipart/mixed;boundary="boundaryl" 

Content-Length: (...) 

--boundaryl 

Content-Type: message/sip 

REGISTER sip:registrar .homel .net SIP/2.0 

Via: SIP/2. 0/UDP icscfl_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2. 0/UDP 
pcscfl.visitedl.net;branch=z9hG4bK24 0f34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc : ddd] : 13 5 7 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path: <VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl.net : 1337; lr;ob> 
Require: path 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp = sigcomp> ; reg-id=l ; 
+ sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp . icsi-ref = ' urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" ; 
+g. 3gpp. iari-ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" ; 
+g. 3gpp . cs -audio ; 
+g. 3gpp . cs -video ; 
expires=600000 

Call -ID: apb0 3a0s0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=base64 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="662 9f ae4 9393a0 53974 50 97850 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

--boundaryl 

Content-Type: message/sip 

SIP/2.0 200 OK 

Via: SIP/2. 0/UDP icscfl_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2. 0/UDP 
pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc : ddd] : 13 57 ; comp = sigcomp;branch=z9hG4bKnashds7 
Path: <sip : termOpcscf 1 .visitedl .net; lr> 
Service-Route : <sip : origOscscf 1 . homel . net ; lr> 
From: <sip : PN_userl_publicl@homel . net> ; tag=4f a3 
To : <sip : PN_userl_publicl®homel . net> 
Call -ID: apb03a0s0 9dkjdfglkj4 9111 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp = sigcomp> ; 

pub-gruu="sip : PN_userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a765-0 0a0c91e6bf 6" ; 
temp-gruu="sip : tgruu. 7hs==jd7vnzga5w7f aj sc7-ajd6f abzOf 8g5®example . com;gr" ; 
reg-id=l; 

+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp. icsi-ref=' urn%3Aurn- 7 %3A3gpp- service. ims .icsi .mmtel" ; 
+g. 3gpp . iari -ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" ; 
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+g. 3gpp. cs -audio ; 

+g. 3gpp. cs -video ; 

expires=600000 

CSeq: 2 REGISTER 

Supported: path, outbound 

Require : outbound 

Date: Wed, 11 July 2001 08:49:37 GMT 

P-Associated-URI : <sip : PN_userl_public2@homel .net>, <sip : PN_userl_public3@homel .net>, <sip : +1-212- 

555-llll@homel . net ; user =phone> 

Content-Length: 



-boundaryl- 



5. SIP 200 (OK) response (PNM AS to S-CSCF) 

6. Sh-Pull (AS to HSS) 

For detailed message flows see 3GPP TS 29.328 [9] in subclause 6.1.1. 

7. Sh-Pull Response (HSS to PNM AS) 

After successful registration, the PNM AS enrols the registered public user identity in the database. 

A.3.2.2 PN-registration in the IM CN subsystem with subscription to reg 
event package 

Figure A.3.2.2-1 details the signalling flows for a successful PN-registration in the IM CN subsystem with subscription 
to reg event package. In this scenario the PN UE also performs the PN controller function. 



UE 



S-CSCF 



1. REGISTER 



3. 200 (OK) 



PNM AS 



HSS 



2. Cx S-CSCF registration notification 



4. REGISTER 



5. 200 (OK) 



6. SUBSCRIBE 



7. 200 (OK) 



8. NOTIFY 



9. 200 (OK) 



10. Sh-Pull 



11. Sh-Pull Resp 



Figure A.3.2.2-1: Successful PN-registration signalling: in the IM CN subsystem with subscription to 

reg event package 

1. REGISTER request (PN UE to IM CN subsystem entities) 

The PN UE initiates a REGISTER request after successful authentication. 
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Table A.3.2.2-1 : REGISTER request (PN UE to IM CN subsystem entities) 

REGISTER sipiregistrar .homel .net SIP/2.0 

Via: SIP/2. 0/UDP icscfl_p. homel. net;branch=z9hG4bK351g45 .1, SIP/2. 0/UDP 
pcscfl.visitedl.net;branch=z9hG4bK24 0f34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc :ddd] : 13 57;comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path:<VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl .net : 13 3 7; lr;ob> 
Require: path 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa :bbb : ccc : ddd] : 1357 ; comp=sigcomp> ; reg-id=l ; 
+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp .icsi-ref= 'urn%3Aurn-7%3A3gpp- service. ims . icsi .mmtel" ; 
+g. 3gpp. iari-ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" ; 
+g. 3gpp. cs -audio ; 
+g. 3gpp . cs -video, - 
expires=600000 

Call -ID: apb03aOs0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=baseS4 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="6 62 9f ae4 93 93a0 5 3 974 5 978 5 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

NOTE: The above REGISTER request contents are shown as received at the S-CSCF not as sent by the PN UE. 

2. Cx: S-CSCF registration notification procedure 

There is no PNM specific content to this, for detailed message flows see 3GPP TS 29.228 [11] in 
subclause 6.1.2. 

3. SIP 200 (OK) response (IM CN subsystem entities to PN UE) 

4. REGISTER request (S-CSCF to PNM AS) 

After the PN UE successfully registered in the IM CN subsystem, the S-CSCF sends a third party REGISTER 
request containing in the body a <service-info> element containing the private user identity of the PN UE to the 
PNM AS based on the initial filter criteria it received which contains the <service-info> element containing the 
private user identity of the PN UE. 

Table A.3.2.2-4: REGISTER request (S-CSCF to PNIVI AS) 

REGISTER sip: pnmas. homel .net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ,-branch=z9hG499ffhy 

Max-Forwards: 70 

From: <sip : scscfl .homel .net>; tag=538ya 

To: <sip: PN_userl_publicl(ahomel .net> 

Call-ID: lasdaddlrf jflslj40a222 

Contact: <sip : scscfl .homel .net>,- expires = 600000 

CSeq: 87 REGISTER 

Content-Type : application/3gpp-ims+xml 

Content-Length: (...) 

<3gpp-ims version="l"> 

< service- info>sip : PN_userl_private@homel . net </ service- info > 

</3gpp-ims> 

5. SIP 200 (OK) response (PNM AS to S-CSCF) 

6. SUBSCRIBE request (PNM AS to S-CSCF) - see example in table A.3.2.2-6 

The PNM AS sends a SUBSCRIBE request to the S-CSCF for the reg event package for the public user identity. 
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Table A.3.2.2-6: SUBSCRIBE request (PNM AS to S-CSCF) 

SUBSCRIBE sip: PN_userl_publicl(ahomel . net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ;branch=z9hG4bK240f 34 . 1 

Max- Forwards : 70 

Route: <sip : scscfohomel .net ; lr> 

Privacy: none 

From: <sip: pnamas . homel . net > ; tag=31415 

To: <sip: PN_userl_publicl(ahomel .net> 

Call -ID: b8 9rjhnedlrf jflslj4 0a222 

CSeq: 61 SUBSCRIBE 

Event : reg 

Expires: 600000 

Accept: application/reginfo+xml 

Contact: <sip :pnmas .homel .net> 

Content-Length: 

7. SIP 200 (OK) response (S-CSCF to PNM AS) 

8. NOTIFY request (S-CSCF to PNM AS) - see example in table A.3.2.2-8 

The S-CSCF sends a first NOTIFY request towards the PNM AS in order to inform the PNM AS about the 
registration status of the monitored user and the UE capabiHties. 

Table A.3.2.2-8: NOTIFY request (S-CSCF to PNM AS) 

NOTIFY sip: pnmas.homel.net SIP/2.0 

Via: SIP/2. 0/UDP scscf ©homel. net ;branch=z9hG4bK332b23 .1 

Max- Forwards : 70 

From: <sip : scscfohomel . net >;tag=15 117 

To: <sip: pnmas .homel .net>;tag=31415 

Call -ID: dre3 6d2v32gnlgiiomm7244 5 

CSeq: 42 NOTIFY 

Subscript ion- St ate : active ;expires=600000 

Event : reg 

Content-Type : application/reginfo+xml 

Contact: <sip : scscf Ohomel . net> 

Content-Length: (...) 

<?xml version="l . 0" ?> 

<reginfo xmlns="urn: ietf :params :xml :ns : reginfo" 

xmlns :gr="urn: ietf :params :xml :ns :gruuinfo" 
version="l" state="full" > 

<registration aor="sip: PN_userl_publicl(ahomel .net " id="a7" state="active"> 
<contact id="76" state="active" event="registered" > 
<uri>sip : [5555 : : aaa :bbb : ccc : ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lld0-a765-0 0a0c91e6bf 6&;gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . icsi_ref ' >&;lt ;urn:urn-7 : 3gpp- service . ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- application, ims . iari .pnm- 
controller&;gt"</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
<unknown-param name= ' +g. 3gpp . cs-video ' > </unknown-param> 
</allOneLine> 
<allOneLine> 

<gr :pub-gruu uri="sip : PN_userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6"/> 
</allOneLine> 

<gr : temp-gruu uri="sip : 8f fkasOBaf 7f asklzi9®homel .net ;gr" f irst-cseq="40"/> 
</contact> 

</registration> 

<registration aor="sip : PN_userl_public2@homel .net" id="a8" state="active" > 
<contact id="77" state=" active" event= " created" > 
<uri>sip : [5555 : : aaa : bbb : ccc :ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6&;gt ; ' </unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- service, ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
<unknown-param name= ' +g. 3gpp . cs-video ' > </unknown-param> 
</allOneLine> 
<allOneLine> 
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<gr :pub-gruu uri="sip : PN_userl_public2@homel .net ;gr=urn:uuid: f 81d4f ae-Tdec-lldO-aTes- 
OOaOcSleSbf 6'7> 

</allOneLine> 

<gr : temp-gruu uri="sip : 2k3e8f arf 7f lfka9zi9@homel .net ;gr" f irst-cseq="40"/> 
</contact> 
</registration> 
</reginf o> 

9. SIP 200 (OK) response (PNM AS to S-CSCF) 
lO.Sh-Pull(AStoHSS) 

For detailed message flows see 3GPP TS 29.328 [9] in subclause 6.1.1. 
11. Sh-Pull Response (HSS to PNM AS) 

After successful registration, the PNM AS enrols the registered public user identity in the database. 

A.3.2.3 PN-registration procecdure for PNE other than a PN UE 

Figure A.3.2.3-1 details the signalling flows for a successful PN-registration in the IM CN subsystem for two PNEs 
other than a PN UE. 
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Figure A.3.2.3-1 : Successful PN-registration signalling for PNE other than a PN UE 
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1. Register request 

PNEl sends a Register request towards UE via the PAN internal interface. The Register request may contain the 
PNE identifier. 

2. SIP REGISTER request (PN UE to IM CN subsystem entities)- see example in table A.3.2.3-2. 

The PN UE initiates a SIP REGISTER request on behalf the PNEl. The PNEl identifier is conveyed in the 
g.3gpp.pne-id media feature tag of the Contact header field to indicate this is registration for the PNE. The value 
of "reg-id" is set to 2. 

NOTE: In this case, a successful authentication has been done before sending the SIP REGISTER request. 
Table A.3.2.3-2: SIP REGISTER request (PN UE to IM CN subsystem entities) 

REGISTER sip: registrar. homel.net SIP/2.0 

Via: SIP/2. 0/UDP icscf l_p . homel . net ;branch=z9hG4bK351g45 . 1 , SIP/2 . 0/UDP 
pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, SIP/2 . 0/UDP 
[55 55 : : aaa : bbb : ccc : ddd] : 13 57 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max- Forwards : 6 8 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path: <VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl .net : 13 3 7; lr;ob> 
Require: path, outbound 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" 
From: <sip : PN_userl_publicl@homel .net>; tag=4f a3 
To : <sip : PN_userl_publicl@homel . net> 

Contact: <sip: [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp> ; reg-id=2 ; 
+ sip. instance="<urn:uuid: f 81d4f ae-7dec-lldO-a765-OOaOc91e6bf 6>" ; 
+g. 3gpp .icsi-ref= 'urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" ; 
+g. 3gpp . iari-ref ="urn%3Aurn-7%3A3gpp-application. ims . iari .pnm-controller" ; 
+g. 3gpp. cs -audio ; 

+g.3gpp.pne-id="<urn:uuid: f 81d4f ae-7dec-lldO-a765-001w4dfdaf er>"expires=600000 
Call -ID: apb0 3a0s0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=baseS4 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar. homel. net" , response="662 9f ae4 9393a0 53974 50 97850 7c4ef 1" , integrity- 
protect ed=" yes" 
CSeq: 2 REGISTER 
Supported: gruu, outbound 
Content-Length: 

3. SIP 200 (OK) response (IM CN subsystem entities to PN UE) 

4. Successful response (UE to PNEl) 

The UE sends the successful response to the register request towards the PNEl via the PAN internal interface. 

5. SIP REGISTER request (S-CSCF to PNM AS)- see example in table A.3.2.3-5 

After the PN UE successfully registered in the IM CN subsystem, the S-CSCF sends a third party REGISTER 
request to the PNM AS based on the initial filter criteria. 

Table A.3.2.3-5: SIP REGISTER request (S-CSCF to PNM AS) 

REGISTER sip: pnmas.homel.net SIP/2.0 

Via: SIP/2. 0/UDP pnmas . homel . net ;branch=z9hG499ffhy 

Max-Forwards: 70 

From: <sip : scscfl . homel . net> ; tag=538ya 

To: <sip: PN_userl jiubliclOhomel .net > 

Call-ID: lasdaddlrf jflslj40a222 

Contact: <sip : scscfl .homel .net>; expires=600000 

CSeq: 87 REGISTER 



6. SIP 200 (OK) response (PNM AS to S-CSCF) 

7. SUBSCRIBE request (PNM AS to S-CSCF) - see example in table A.3.2.3-7 
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The PNM AS sends a SUBSCRIBE request to the S-CSCF for the reg event package. 
Table A.3.2.3-7: SUBSCRIBE request (PNM AS to S-CSCF) 

SUBSCRIBE sip: PN_userl_publicl(Shomel .net SIP/2.0 

Via: SIP/2. 0/UDP pnmas.homel.net;branch=z9hG4bK240f34 .1 

Max- Forwards : 70 

Route: <sip : scscfohomel .net ; lr> 

Privacy: none 

From: <sip: pnamas . homel . net> ; tag=31415 

To: <sip: PN_userl_publicl@homel .net> 

Call -ID: b8 9rjhnedlrf jflslj4 0a222 

CSeq: 61 SUBSCRIBE 

Event : reg 

Expires: 600000 

Accept: application/reginfo+xml 

Contact: <sip :pnmas .homel .net> 

Content-Length: 

8. SIP 200 (OK) response (S-CSCF to PNM AS) 

9. NOTIFY request (S-CSCF to PNM AS) - see example in table A.3.2.3-9 

The S-CSCF sends a first NOTIFY request towards the PNM AS in order to inform the PNM AS about the 
registration status of the monitored user and the PNE capabilities. 

Table A.3.2.3-9: NOTIFY request (S-CSCF to PNM AS) 

NOTIFY sip: pnmas.homel.net SIP/2.0 

Via: SIP/2. 0/UDP scscf@homel.net;branch=z9hG4bK332b23 .1 

Max- Forwards : 70 

From: <sip : scscfohomel . net >; tag=15 117 

To: <sip: pnmas .homel .net>;tag=31415 

Call -ID: dre36d2v32gnlgiiomm7244 5 

CSeq: 42 NOTIFY 

Subscript ion- St ate : active; expires=600000 

Event : reg 

Content-Type : application/reginfo+xml 

Contact: <sip : scscfohomel .net> 

Content-Length: (...) 

<?xml version="l . 0" ?> 

<reginfo xmlns="urn: ietf :params :xml :ns : reginfo" 

xmlns :gr="urn: ietf :params :xml :ns :gruuinfo" 
version="l" state="full" > 

<registration aor="sip: PN_userl_publicl(8homel .net " id="a7" state="active"> 
<contact id="76" state="active" event="registered" > 
<uri>sip : [5555 : : aaa :bbb : ccc :ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lldO-a765-OOaOc91e6bf 6&;gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . icsi_ref ' >&;lt ;urn:urn-7 : 3gpp- service . ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- application, ims . iari .pnm- 
controller&;gt"</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
</unknown-param> 

<unknown-param name= ' +g. 3gpp .pne-id' >&;lt ;urn:uuid: f 81d4f ae-7dec-lldO-a765-0 01w4dfdaf er; ' 
</unknown-param> 
</allOneLine> 
<allOneLine> 

<gr :pub-gruu uri="sip : PN_userl_publiclOhomel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6"/> 
</allOneLine> 

<gr : temp-gruu uri="sip : 8f fkas08af 7f asklzi90homel .net ;gr" f irst-cseq="40"/> 
</contact> 

</registration> 

<registration aor="sip : PN_userl_public20homel .net" id="a8" state="active" > 
<contact id="77" state="active" event=" created" > 
<uri>sip : [5555 : : aaa :bbb : ccc :ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&lt ;urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6&;gt ; ' </unknown-param> 



£75/ 



3GPP TS 24.259 version 10.1.0 Release 10 32 ETSI TS 124 259 VI 0.1.0 (2011-10) 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- service . ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
<unknown-param name= ' +g. 3gpp . cs- video ' > </unknown-param> 
</allOneLine> 
<allOneLine> 

<gr :pub-gruu uri="sip : PN_userl_public2@homel .net ;gr=urn:uuid: f 81d4f ae-Vdec-lldO-aTSS- 
OOaOcgieSbf 6'7> 

</allOneLine> 

<gr : temp-gruu uri="sip : 2k3e8f arf 7f lfka9zi9@homel .net ;gr" f irst-cseq="40"/> 
</contact> 
</registration> 
</reginf o> 

10. SIP 200 (OK) response (PNM AS to S-CSCF) 

11. Enrol the PNEl 

After successful registration, the PNEl is registered into the PAN, i.e. save the bindings between UE and PNE 
identifiers in the database. 

12. Register request 

PNE2 sends a Register request towards UE via the PAN internal interface. The Register request may contain the 
PNE2 identifier. 

13. SIP REGISTER request (PN UE to IM CN subsystem entities)- see example in table A.3.2.3-13. 

The PN UE initiates a SIP REGISTER request on behalf the PNE2. The PNE2 identifier is conveyed in the 
g.3gpp.pne-id media feature tag of the Contact header field to indicate this is registration for the PNE2. The 
value of "reg-id" is set to 3 to not override the previous registration for PNE2. 

Table A.3.2.3-13: SIP REGISTER request (PN UE to IM CN subsystem entities) 

REGISTER sip:registrar .homel .net SIP/2.0 

Via: SIP/2. 0/UDP icscfl_p. homel. net ;branch=z9hG4bK351g45.1, SIP/2. 0/UDP 
pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, SIP/2 . 0/UDP 
[5555 : : aaa :bbb : ccc :ddd] : 13 5 7;comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 68 

P-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=234151D0FCEll : 3GPP-UTRAN; np 
Path: <VskztcQ/S8p4WPbOnHbuyh5iJvJIW3ib@pcscf 1 .visitedl .net : 13 3 7; lr;ob> 
Require: path, outbound 

P-Visited-Network-ID : "Visited Network Number 1" 

P- Charging- Vector : icid-value="AyretyU0dm+6O2IrT5tAFrbHLso=023551024" 
From: <sip : PN_userl_publicl@homel . net> ; tag=4f a3 
To: <sip :PN_userl_publicl@homel .net> 

Contact: <sip: [5555 :: aaa :bbb : ccc :ddd] : 1357 ; comp=sigcomp> ; reg-id=3 ; 
+sip. instance="<urn:uuid: f 81d4f ae-7dec-lld0-a765-00a0c91e6bf 6>" ; 
+g. 3gpp. icsi-ref=' urn%3Aurn- 7 %3A3gpp- service . ims .icsi .mmtel" ; 
+g. 3gpp. iari-ref ="urn%3Aurn- 7 %3A3gpp- application. ims . iari .pnm- controller" ; 
+g. 3gpp. cs -video ; 

+g.3gpp.pne-id="<urn:uuid: f 81d4f ae-7dec-lldO-b78 9-99ef 34f ledvd5>" 
expires=600000 

Call -ID: apb0 3aOs0 9dkjdfglkj4 9111 

Authorization: Digest username="userl_private@homel .net" , realm="registrar .homel .net" , 
nonce=base64 {RAND + AUTN + server specific data), algorithm=AKAvl-MD5 , 

uri=" sip: registrar .homel .net" , response="6 62 9f ae4 93 93a0 5 3 974 5 978 5 7c4ef 1" , integrity- 
protected= "yes " 
CSeq: 3 REGISTER 
Supported: gruu, outbound 
Content-Length: 

14. SIP 200 (OK) response (IM CN subsystem entities to PN UE) 

15. Successful response (UE to PNE2) 

The UE sends the successful response to the register request towards the PNE via the PAN internal interface. 

16. NOTIFY request (S-CSCF to PNM AS) - see example in table A.3.2.3-16 
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The S-CSCF sends a first NOTIFY request towards the PNM AS in order to inform the PNM AS about the 
PNE2 identifier and PNE2 capabihtes. 

Table A.3.2.3-16: NOTIFY request (S-CSCF to PNM AS) 

NOTIFY sip: pnmas.homel.net SIP/2.0 

Via: SIP/2. 0/UDP scscf@homel.net;branch=z9hG4bK332b23 .1 

Max- Forwards : 70 

From: <sip : scscfohomel . net >;tag=15 1170 

To: <sip: pnmas .homel .net>; tag=31415 

Call -ID: dre3Sd2v32gnlgiiomm7244 5 

CSeq: 43 NOTIFY 

Subscript ion- St ate : active ;expires=6 00 000 

Event : reg 

Content-Type : application/reginf o+xml 

Contact: <sip : scscfohomel . net> 

Content-Length: (...) 

<?xml version="l . 0" ?> 

<reginfo xmlns="urn: ietf :params :xml :ns : reginfo" 

xmlns :gr="urn: ietf :params :xml :ns :gruuinfo" 
version="l" state="full" > 

<registration aor="sip: PN_userl_publicl@homel.net" id="a7" state="active"> 
<contact id="76" state="active" event="registered" > 
<uri>sip : [5555 : : aaa :bbb: ccc :ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lld0-a765-0 0a0c91e6bf S&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . icsi_ref ' >&;lt ;urn:urn-7 : 3gpp- service . ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- application, ims . iari .pnm- 
controller&;gt"</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-video ' > </unknown-param> 
</unknown-param> 

<unknown-param name= ' +g. 3gpp .pne-id' >&;lt ;urn:uuid: f 81d4f ae-7dec-lldO-b78 9-99ef 34f ledvd5; ' 
</unknown-param> 
</allOneLine> 
<allOneLine> 

<gr :pub-gruu uri="sip : PN_userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6"/> 
</allOneLine> 

<gr : temp-gruu uri="sip : 8f fkas08af 7f asklzi9®homel .net ;gr" f irst-cseq="40"/> 
</contact> 

</registration> 

<registration aor="sip : PN_userl_public2@homel .net" id="a8" state= " active " > 
<contact id="77" state="active" event="created" > 
<uri>sip : [5555 : : aaa :bbb : ccc : ddd] </uri> 
<allOneLine> 

<unknown-param name= ' +sip . instance ' >&;lt ;urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf S&gt ; ' </unknown-param> 

<unknown-param name= ' +g. 3gpp . iari_ref ' >&;lt ;urn:urn-7 : 3gpp- service . ims . icsi .mmtel&gt ; ' 
</unknown-param> 

<unknown-param name= ' +g. 3gpp . cs-audio ' > </unknown-param> 
<unknown-param name= ' +g. 3gpp . cs-video ' > </unknown-param> 
</allOneLine> 
<allOneLine> 

<gr :pub-gruu uri="sip : PN_userl_public2@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf 6"/> 

</allOneLine> 

<gr : temp-gruu uri="sip : 2k3e8f arf 7f lfka9zi9®homel .net ;gr" f irst-cseq="40"/> 
</contact> 
</registration> 
</reginfo> 

17. SIP 200 (OK) response (PNM AS to S-CSCF) 

18. Enrol the PNE2 

After successful registration, the PNE2 is registered into the PAN. 
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A.3.3 Signalling flows for PN-configuration 
A.3.3.1 PN-configuration for PN UE redirection 

Figure A.3.3. 1-1 shows the message exchange between PN UE and NAF/PNM AS when the PN UE wants to configure 
the PN settings for the PN UE redirection. The messaging only takes place after a successful bootstrapping procedure 
(as described in 3GPP TS 33.220 [8]) in which case the bootstrapped security association has been established before 
step 1. 



PNUE 



NAF/PNM AS 



-1. PN-configuration request- 



2. Authentication and authrization 
Capability and subcription check 



3. PN-configuration response 

Figure A.3.3. 1-1 : Successful PN-configuration for UE redirection 

1. Initial PN-configuration request (PN UE to NAF/PNM AS) - see example in table A.3.3.1-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request for the PN UE 
redirection. 

Table A.3.3.1-1 : Initial PN-configuration request (UE to NAF/PNM AS) 

PUT http : //xcap .homel .net/pnm. 3gpp . org/users/sip : PN_user_public®homel .net/pnm HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release-6 3gpp-gba 

Content-Type: application/pnm+xml charset="utf -8" 

Content-Length: (...) 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=MD5 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 

<UERedirection UriOfRedirectedUser="sip : PN_userl_publicl@homel .net" > 
<RedirectedUserID> 

<PNUEID>sip: PN_userl_publicl®homel .net</PNUEID> 
<PNUEName>PN_userl_publicl_old</PNUEName> 
</RedirectedUserID> 
<RedirectingUserID id=l> 

<PNUEID>sip: PN_user2_publicl@homel .net</PNUEID> 
<PNUEName>PN_user2_publicl_old</PNUEName> 
<RedirectionLevel>application</RedirectionLevel> 
<RedirectionPrio>l< /Redirect ionPrio> 
</RedirectingUserID> 
</UERedirection> 
</PNConf iguration> 



Request-URI: The Request-URI (the URl that follows the method name, "PUT", in the first line) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URl which indicates 
to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URl 

provided by the referring resource. 
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User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the appHcation server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPP TS 33.220 [8]). 

XML body: Contains the settings for the PN UE redirection that the PN-user requests the PNM AS to do. In 

this example, the UE with public user identity <sip: PN_userl_publicl @homel.net > requests 
the PNM AS to configure the redirection of all sessions, addressing <sip: 
PN_user2_publicl @homel.net > with the PN UE name PN_user2_publicl_old, to <sip: 
PN_userl_publicl @homel.net > with the PN UE name PN_userl_publicl_old with the 
highest priority, i.e. one. 

2. Authentication/authorization and UE capability and subscription checking 

The NAF/PNM AS verifies the Authorization header by using the bootstrapping transaction identifier B-TID and 
the key material Ks_NAF obtained from BSF (as described in 3GPP TS 33.220 [8]). NAF/PNM AS calculates 
the corresponding digest values using Ks_NAF, and compares the calculated values with the received values in 
the Authorization header. If the verification succeeds, the NAF passes the private user identity <sip: 
PN_userl_private@homel.net> associated with the public user identity <sip: PN_userl_publicl @homel.net> 
to the PNM AS. The PNM AS then authorizes the UE by comparing the received public user identity <sip: 
PN_userl_publicl @homel.net> with the preconfigured one identified by the private user identity <sip: 
PN_userl_private@homel.net>. If the authorization succeeds, the incoming request is taken in for further 
processing. 

The NAF/PNM AS also performs the PN UE capability and subscription checking. If the checking succeeds, the 
incoming request is taken in for further processing. 

NOTE: Performing the PN UE subscription checking entails the interaction with the HSS over the sh interface 
(see 3GPP TS 29.328 [9]) which is not shown in the message flow. 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3-3 

The PNM AS sends a HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 

Table A.3.3.1-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1.3.22 {Un 


IX) 


mod perl/1 .27 






Content 


-Length: 












Authentication-Info : 


qop = 


auth-int, rspauth= 


"6 629fae4 93 94a0 5 3 974 50 978 50 7c4efl", 


cnonce= 


"6 62 9fae4 9393a0 53974 50 97850 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


36 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:3S GMT 







Authentication-Info: This carries the protection. 

A.3.3.2 PN-configuration for PN access control 

Figure A. 3. 3. 2-1 shows the message exchange between PN UE and NAF/PNM AS when the PN UE wants to configure 
the PN settings for the PN access control service. The messaging only takes place after a successful bootstrapping 
procedure (as described in 3GPP TS 33.220 [8]) in which case the bootstrapped security association has been 
estabUshed before step 1 . 
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-1. PN-configuration request- 
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<y- 



-3. PN-configuration response- 



Figure A.3.3.2-1 : Successful initial PN-configuration for PN access control 

1. Initial PN-configuration request (PN UE to NAF/PNM AS) - see example in table A.3.3.2-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request for the PN access 
control. 

Table A.3.3.2-1 : Initial PN-configuration request (UE to NAF/PNM AS) 

PUT http : //xcap .homel .net/pnm. 3gpp .org/users/sip : PN_user_public@homel .net/pnm HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release-6 3gpp-gba 

Content-Type: application/pnm+xml charset="utf -8" 

Content-Length: (...) 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping®pnmas .homel .net" , 

nonce="aS332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=MD5 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 

<AccessControl UriOf ControllerUE="sip : PN_userl_publicl@homel . com" > 
<ControllerUE> 

<PNUEID>sip:PN_userl_publicl@homel .net</PNUEID> 
<PNUEName>PN_userl_publicl_old</PNUEName> 
</ControllerUE> 
<ControlleeUE id=l> 

<PNUEID>sip:PN_user2_publicl@homel .net</PNUEID> 
<PNUEName>PN_user2_publicl_old</PNUEName> 

<PNAccessControlList>sip : PN_userl_f riend_publicl@homel . net 
sip : PN_userl_f riend_public2@homel . net</PNAccessControlList> 

<PNAccessControlType>Controller</PNAccessControlType> 
</ControlleeUE> 
</AccessControl> 
</PNConf iguration> 

Request-URI: The Request-URI (the URI that follows the method name, "PUT", in the first hne) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URI which indicates 
to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

provided by the referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 
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Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPP TS 33.220 [8]). 

XML body: Contains the settings for the PN access control service that the UE requests from the PNM AS. 

In this example, the UE with public user identity <sip: PN_userl_publicl @homel.net> 
requests the PNM AS to configure PN access control for all sessions, addressing <sip: 
PN_user2_publicl @ho mel.net > with the PN UE name PN_user2_publicl_old, except for the 
case when the callee is either <sip: PN_userl_friend_publicl @homel.net> or < sip: 
PN_userl_friend_public2@homel.net >. Furthermore, the UE indicates in the access control 
type that the controller UE with <sip: PN_userl_publicl @homel.net> and the PN UE name 
PN_userl_publicl_old needs to be interrogated when the PNM AS executes the PN access 
control. 

2. Authentication/authorization and subscription checking 

As described in Step 2 of figure A.3.3.1-1. 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3.2-3 

The PNM AS sends a HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 

Table A.3.3.2-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1.3.22 {Un 


LX) 


mod perl/1 .27 






Content 


-Length: 












Authentication-Info : 


qop = 


auth-int, rspauth= 


"6 629fae4 93 94a0 53 974 50 97850 7c4efl", 


cnonce= 


"662 9fae4 9393a0 53974 50 97850 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


3 6 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:36 GMT 







Authentication-Info: This carries the protection. 

A.3.3.3 PN-configuration for cinanging PN UE name 

Figure A.3.3.3-1 shows the message exchange between PN UE and NAF/PNM AS when the PN UE changes the PN 
UE name. The messaging only takes place after a successful bootstrapping procedure (as described in 
3GPP TS 33.220 [8]) in which case a bootstrapped security association has been established before step 1. 



PNUE 



-1. PN-configuration request- 



NAF/PNM AS 



-o 



2. Authentication and authrization 
Capability and subcription check 



^- 



-3. PN-configuration response- 



Figure A.3.3.3-1 : Successful PN-configuration for changing PN UE name 

1 . Initial PN-configuration request (PN UE to NAF/PNM AS) - see example in table A.3.3.3-1 

The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request for changing the 
PN UE name. 

Table A.3.3.3-1 : Initial PN-configuration request (UE to NAF/PNIUI AS) 



PUT http : //xcap .homel .net/pnm. 3gpp .org/users/sip : PN_user_public@homel .net/pnm HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release- 6 3gpp-gba 

Content-Type: application/pnm+xml charset="utf -8" 
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Content-Length: (...) 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="SS29fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=MD5 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 
<Nameof PNUE> 

<PNUEID>sip:PN_userl_publicl@homel .net</PNUEID> 
<UEName id=l> 

<Name>PN_userl_publicl_new</Name> 
</NameofPNUE> 
</PNConf iguration> 



Request-URI: The Request-URI (the URI that follows the method name, "PUT", in the first line) indicates the 

resource of this PUT request. The Request-URI contains the XCAP HTTP URI which indicates 
to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

provided by the referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPPTS 33.220 [8]). 

XML body: Contains the old and the new PN UE names that the PN-user requests the PNM AS to change. 

In this example, the UE with public user identity <sip: PN_userl_publicl @homel.net > 
requests the PNM AS to change the old PN UE name with the new PN UE name 
"PN_user 1 _public 1 _ne w" . 

2. Authentication/authorization and UE capability and subscription checking 

As described in Step 2 of figure A. 3. 3. 1-1. 

NOTE: Changing the PN UE name from PN_userl_publicl_old to PN_userl_publicl_new does not entail 
interaction between the PN MAS and the HSS over the Sh interface. 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3.3-3 

The PNM AS sends a HTTP 200 OK response to the PN UE to indicate the success of the PN-configuration. 

Table A.3.3.3-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1 .3.2: 


{Un 


LX) 


mod perl/1 .27 






Content 


-Length: 












Authentication-Info : 


qop = 


auth-int, rspauth= 


"6 62 9fae4 93 94a0 5 3 974 50 978 50 7c4efl", 


cnonce= 


"6 62 9fae4 9393a0 5 3974 50 978 50 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


3 6 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:36 GMT 







Authentication-Info: This carries the protection. 
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A.3.3.4 PN-query 



Figure A.3.3.4-1 shows the message exchange between PN UE and NAF/PNM AS when the FN UE wants to obtain the 
FN setting information from the FNM AS. The messaging only takes place after a successful bootstrapping procedure 
(as described in 3GFF TS 33.220 [8]) in which case the bootstrapped security association has been established before 
step 1. 



PNUE 



PNMAS 



-1. PN-query request- 



Authentication and authrization 



-3. PN-query response- 



Figure A.3.3.4-1 : Successful PN-query 

1 . Initial PN-query request (PN UE to NAF/PNM AS) - see example in table A.3.3.4-1 

The FN UE sends an HTTF request to the NAF/FNM AS FN in order to obtain the FN setting information of the 
<UERedirection> with the attribute value "UriOfRedirectedUser= sip:FN_userl_publicl@homel.net". 

Table A.3.3.4-1 : Initial PN-query request (UE to NAF/PNM AS) 

GET 

http : //xcap .homel .net/pnm. 3gpp .org/users/sip : PN_user_public@homel .net/pnm/~~/PNConf iguration/UERedir 

ection%5b@UriOfRedirectedUser=%22sip: PN_userl_publicl®homel .net%22%5d HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release-6 3gpp-gba 

Content-Length: 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: application/pnm+xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="6629fae49393a05397450978507c4ef 1" , response=" 6629f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=iyiD5 

Request-URI: The Request-URI (the URI that follows the method name, "FUT", in the first line) indicates the 

resource of this FUT request. The Request-URI contains the XCAF HTTF URI which indicates 
to the FNM AS the desired FN is requested to be queried. 

Host: Specifies the Internet host and port number of the FNM AS, obtained from the original URI 

provided by the referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAP) that the UE supports 3GFF- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

FNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GFF TS 33.220 [8]). 

XML body: In this example, it is assumed that the UE with the public user identity < sip: 

FN_userl_public 1 @home 1 .net > interrogates the FNM AS for the whole set of the FN setting 
information. 
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2. Authentication/authorization and UE capability 

See Step 2 of figure A.3.3.4-1. 

3. Delivery of PN-query response (NAF/PNM AS to FN UE) - see example in table A.3.3.4-3 

The PNM AS sends a HTTP 200 OK response to the PN UE to inform the whole set of the PN setting 
information for the <UERedirection> with the attribute value "UriOfRedirectedUser= 
sip : PN_user 1 _publicl @ home 1 . net" . 

Table A.3.3.4-3: Delivery of PN-query response (NAF/PNM AS to PN UE) 

HTTP/1.1 200 OK 

Server: Apache/1.3.22 (Unix) mod_perl/l . 27 

Content-Length: 

Authentication- Info: qop=auth-int , rspauth="6 62 9f ae4 93 94a0 53 974 5 978 5 7c4ef 1" , 

cnonce="6629fae49393a05397450978507c4ef 1" , nc=00000001 

Date: Wed, 31 Oct 2007 10:50:36 GMT 

Expires: Wed, 31 Nov 2007 10:50:36 GMT 

<?xml version="l . 0" encoding="utf -8" ?> 
<PNConf iguration> 

<UERedirection UriOfRedirectedUser="sip : PN_userl_publicl@homel .net" > 
<RedirectedUserID> 

<PNUEID>sip: PN_userl_publicl@homel.net</PNUEID> 
<PNUEName>PN_userl_publicl_old</PNUEName> 
</RedirectedUserID> 
<RedirectingUserID id=l> 

<PNUEID>sip : PN_user2_publicl®homel . net</PNUEID> 
<PNUEName>PN_user2_publicl_old</PNUEName> 
<RedirectionLevel>application</RedirectionLevel> 
<RedirectionPrio>l< /Redirect ionPrio> 
</RedirectingUserID> 
</PNConf iguration> 

Authentication-Info: This carries the protection. 

XML body: Indicates the whole set of the PN setting information related to the UE with the public user identity 

< sip: PN_userl_publicl@homel.net>. 



A.3.3.5 PN-(deconfiguration 



Figure A.3.3.5-1 shows the message exchange between PN UE and NAF/PNM AS when the PN UE wants to 
deconfigure the PN settings for the UE redirection service and the PN access control service. The messaging only takes 
place after a successful bootstrapping procedure (as described in 3GPP TS 33.220 [8]) in which case the bootstrapped 
security association has been established before step 1. 



PNUE 



NAF/PNM AS 



-1. PN-deconfiguration request- 



2. Authentication and authrization 



<y- 



-3. PN-deconfiguration response- 



Figure A.3.3.5-1: Successful initial PN-deconfiguration 
1 . Initial PN-deconfiguration request (PN UE to NAF/PNM AS) - see example in table A.3.3.5-1 
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The PN UE sends an HTTP request to the NAF/PNM AS containing the configuration request to delete the 
<UERedirection> with the attribute value "UriOfRedirectedUser= sip:PN_userl_publicl@homel.net". 

Table A.3.3.5-1: Initial PN-deconfigu ration request (UE to NAF/PNM AS) 



DELETE 

http : //xcap .homel .net/pnm. 3gpp . org/users/sip : PN_user_public@homel .net/pnm/~~/PNConf iguration/UERedir 

ection%5b@UriOfRedirectedUser=%22sip: PN_userl_publicl@homel .net%22%5d HTTP/1 . 1 

Host: pnmas .homel .net : 1234 

User-Agent: PNM User Agent; Release-6 3gpp-gba 

Content-Length: 

Date: Wed, 31 Oct 2007 10:50:35 GMT 

Accept: text/xml 

Ref errer : http : //pnmas . homel . net : 1234/service 

Authorization: Digest username=" (B-TID) " , realm="3GPP-bootstrapping@pnmas .homel .net" , 

nonce="a6332f fd2d234==" , uri="pnmclient" , qop=auth-int , nc=00000001, 

cnonce="SS29fae49393a05397450978507c4ef 1" , response=" SS29f ae49393a05397450978507c4ef 1" , 

opaque="5ccc069c403ebaf 9f 0171e9517f 30e41" , algorithm=MD5 



Request-URI: The Request-URI (the URI that follows the method name, "DELETE", in the first line) 

indicates the resource of this DELETE request. The Request-URI contains the XCAP HTTP 
URI which indicates to the PNM AS the desired PN is requested to be configured. 

Host: Specifies the Internet host and port number of the PNM AS, obtained from the original URI 

provided by the referring resource. 

User-Agent: Contains information about the user agent originating the request and it includes the static 

string "3gpp-gba" to indicate to the application server (i.e., NAF) that the UE supports 3GPP- 
bootstrapping based authentication. 

Referer: Allows the user agent to specify the address (URI) of the resource from which the URI for the 

PNM AS was obtained. 

Authorization: Contains the credentials obtained by means of the bootstrapping procedure (as described in 

3GPPTS 33.220 [8]). 

XML body: In this example, the UE with public user identity <sip: PN_userl_publicl @homeLnet> wants 

the PNM AS to delete the whole PN settings established before. 

2. Authentication/authorization and UE capability and subscription checking 

See Step 2 of figure A.3.3.5-L 

3. Delivery of PN-configuration response (NAF/PNM AS to PN UE) - see example in table A.3.3.5-3 

The PNM AS sends a HTTP 200 OK response to the PN UE to indicate the success of the PN-deconfiguration. 

Table A.3.3.5-3: Delivery of PN-configuration response (NAF/PNM AS to PN UE) 



HTTP/1. 


1 200 OK 












Server: 


Apache/1.3.22 {Un 


LX) 


mod perl/1 .27 






Content 


-Length: 












Authentication- Info : 


qop = 


auth-int, rspauth= 


="6629fae49394a05397450978507c4efl". 


cnonce= 


"6 62 9fae4 9393a053974 50 97850 7c4efl", 


nc=00000001 




Date: Wed, 31 Oct 2007 10 


:50 


36 GMT 






Expires 


: Wed, 31 Nov 


2007 


10 


50:3S GMT 







Authentication-Info: This carries the protection. 

A.3.4 Signalling flows for PN UE redirection 
A.3.4.1 PN UE redirection in the IIVI CN subsystem 

Figure A.3.4. 1-1 details the signalling flows for PN UE redirection in the IM CN subsystem. 
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S-CSCF#2 



— 1. INVITE #1- 

-2. 100 (Trying)- 



PNM AS 



3. Evaluation of Initial 
Filter Criteria 



-23 200 (OK>- 
— 24. ACK — 



-4. INVITE #1— 
-5. 100 (Trying)- 



S-CSCF#3 



6. PNM Redirection 
Session Control 



-7. INVITE #2— 
-8. 100 (Trying)- 



-9. INVITE #2- 



-10. 100 (Trying)- 
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13. PNM Redirection 
Session Control 



-14. INVITE #2- 



-15. 100(Trying>- 



-18. 200 (OK>- 



-19. 200 (OK)- 



-20. 200 (OK)- 



-21.200(OK>- 



-22. 200 (OK>- 



-25. ACK- 



-26. ACK- 



-27. ACK- 



-28. ACK- 
-29. ACK- 



-16. INVITE #2- 



-17. 200 (OK>- 



-30. ACK- 



Figure A.3.4.1-1 : Successful PN UE redirection: in the IM CN subsystem 

The steps prior to step 1 are according to the standard procedures specified in 3GPP TS 24.228 [10]. 
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1. INVITE#1 request (I-CSCF#2 to S-CSCF#2) -see example in table A.3.4.1-1 

I-CSCF#2 forwards the INVITE request to S-CSCF#2 after invocation of the User Location Query procedure. 

Table A.3.4.1-1 : INVITE (l-CSCF#2 to S-CSCF#2) 



INVITE sip:PN_user2_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP icscf2 .home2 .net;branch=z9hG4bK871yl2 .1, 

SIP/2. 0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 .0/UDP pcscfl.homel.net;branch=z9hG4bK240f34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 65 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route : <sip:scscfl .homel .net; lr>, <sip :pcscf 1 .homel .net; lr> 

P-Asserted-Identity : "John Doe" <sip :userl_publicl®homel .net> 

Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=17182 8 

To: <sip: PN_user2_publicl@home2 .net> 

Call -ID: Cb03a0s09a2sdfglkj 490333 

Cseq: 127 INVITE 

Supported: precondition, 10 Orel, gruu, 199 

Accept -Contact : * ; +g. 3gpp . icsi-ref ="urn%3Aurn- 7 %3A3gpp- service . ims . icsi .mmtel" 

P- Asserted- Service : urn: urn- 7 : 3gpp- service . ims .icsi .mmtel Contact : 

<sip :userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5-00a0c91e6bf 6>; 

+g. 3gpp . icsi_ref ="urn%3Aurn- 7% 3A3gpp- service . ims .icsi .mmtel" 

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE, REFER, MESSAGE 

Accept: application/sdp, application/3gpp-ims+xml 

Content-Type: application/sdp 

Content -length: (...) 

v=0 

o=- 2987933615 2987933615 IN IP6 5555 :: aaa : bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: ccc : ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap : 1 RTP/AVPF 

a=pcfg:l t=l 

b=AS:2 5.4 

a=curr:qos local none 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7; maxframes=2 

a=rtpmap:96 telephone-event 



2. SIP 100 (Trying) response 

3. Evaluation of initial filter criteria 

The S-CSCF#2 validates the service profile of this subscriber and evaluates the initial filter criteria. 

4. INVITE#1 request (S-CSCF#2 to PNM AS)- see example in table A.3.4.1-4 

Based on the evaluation of initial filter criteria, the S-CSCF#2 forwards the INVITE request with the Request- 
URI of the UE-1 to the PNM AS. 

Table A.3.4.1-4: INVITE (S-CSCF#2 to PNM AS) 



INVITE sip:PN user2 publicl@home2.net SIP/2.0 




Via: SIP/2. 0/UDP scscf2.home2.net;branch=z9hG4bK240f34.1, 




SIP/2 . 0/UDP icscf 2 . home2 . net ;branch=z9hG4bK871yl2 . 1 , 




SIP/2. 0/UDP scscf 1. homel. net ;branch=z9hG4bK332b23.1, 




SIP/2. 0/UDP pcscfl. homel. net ;branch=z9hG4bK240f 34.1, 




SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 




Max-Forwards: 64 




Route: <sip :pnmas .home2 .net ; lr> 




Record- 




Route : <sip : scscf 2 .home2 .net; lr>, <sip : icscf 1 .homel .net; lr>, <sip : scscf 1 .homel .net; lr> 


<sip : pcscfl .home 


.net; lr> 




P-Asserted- Identity : 
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Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=17182£ 

To: <sip: PN_user2_publicl@home2 .net> 

Call-ID: 

Cseq: 

Supported: precondition, lOOrel, gruu 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content-length: (...) 



5. SIP 100 (Trying) response (PNM AS to S-CSCF#2) 

6. FN UE redirection control 

The PNM AS executes the PN UE redirection logic based on the PN-user's PN configurations and decides to 
redirect the initial request to the default UE of the PN, e.g. to the UE-3. 

7. INVITE#2 request (PNM AS to S-CSCF#2) - see example in table A.3.4. 1-7 

As a result of the PN UE redirection logic execution, the PNM AS sends the redirected INVITE request with the 
Request-URI of the UE-2 public user identity to the S-CSCF#2. 



Table A.3.4.1-7: INVITE#2 (PNM AS to S-CSCF#2) 



INVITE sip:PN_user3_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP pnmas.home2 .net; brach= z9hG4bK712z34 . 1, 

SIP/2 .0/UDP scscf2 .home2 .net ;branch=z9hG4bK764z87 . 1, 

SIP/2 .0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 .0/UDP pcscfl.homel.net;branch=z9hG4bK240f34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max- Forwards : 63 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record-Route: <sip :pnmas . home2 . net> , <sip : scscf 2 .home2 .net ; lr>, <sip : icscf 1 .homel .net ; lr>, 

<sip:scscfl .homel .net; lr>,<sip:pcscfl .homel .net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: precondition, 10 Orel, gruu, 199, hist info 

History- Info : <sip : PN_user2_publicl@home2 .net>; index=l, 

<sip : PN_user3_publicl@home2 . net> ; index=l . 1 
Accept-Contact : 
P-Asserted-Service : 
Contact : 
Allow: 
Accept : 
Content-Type : 
Content-length: (...) 
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8. SIP 100 (Trying) response (S-CSCF#2 to PNM AS) 

9. INVITE#2 request (S-CSCF#2 to S-CSCF#3) - see example in table A.3.4.1-9 

The S-CSCF#2 forwards the redirected INVITE request to the S-CSCF#3. The S-CSCF#2 and S-CSCF#3 can be 
the same entity. 

Table A.3.4.1-9: INVITE#2 (S-CSCF#2 to S-CSCF#3) 

INVITE sip:PN_user3_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf2 .home2 .net;branch=z9hG4bK735zl2 .1, 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 

SIP/2 .0/UDP scscf2 .home2 .net ;branch=z9hG4bK7S4z87 . 1, 

SIP/2 .0/UDP icscfl.homel.net;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 .0/UDP pcscfl@homel.net;branch=z9hG4bK240f34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max- Forwards : 62 

Route : <sip : scscf 3 . home2 . net ; lr> 

Record-Route: <sip : scscf 3 .home2 .net ; lr>, <sip :pnmas .home2 .net>, <sip : scscf 2 .home2 .net ; lr>, 

<sip:icscfl .homel .net; lr>, <sip:scscfl .homel .net ; lr>, <sip :pcscf 1 .homel .net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Supported: 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 
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10. SIP 100 (Trying) response (S-CSCF#3 to S-CSCF#2) 

The S-CSCF#3 responds to the INVITE#3 request with a 100 Trying provisional response. 

11. INVITE#2 request (S-CSCF#3 to PNM AS) - see example in table A.3.4.1-11 

Based on the evaluation of initial filter criteria, the S-CSCF#3 forwards the INVITE request with the Request- 
URI of the UE-3 to the PNM AS. 

Table A.3.4.1-11 : INVITE#2 (S-CSCF#3 to PNM AS) 

INVITE sip:PN_user3_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf3 .home2 .net;branch=z9hG4bK735zl2 .1, 

SIP/2 .0/UDP scscf2 .home2 . net ;branch=z9hG4bK735zl2 .1, 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1, 

SIP/2 .0/UDP scscf2 .home2 . net ;branch=z9hG4bK764z87 . 1 , 

SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 

SIP/2 . 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357;comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 61 

Route: <sip :pnmas .home2 .net ; lr> 

Record- Route : <sip:scscf3 .home2 .net;lr>,<sip:scscf2 .home2 .net; lr>, <sip :pnmas .home2 .net>, 

<sip : scscf 1 . home2 . net ; lr> , <sip : icscf 2 . home2 . net ; lr> , <sip : scscf 1 . homel . net ; lr> , 

<sip : pcscf 1 .homel .net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content-length: (...) 

v= 
o= 
s = 
c= 
t= 



12. SIP 100 (Trying) response (PNM AS to S-CSCF#3) 

13. PN UE redirection control 

The PNM AS executes the PN UE redirection control logic based on the PN-user's PN configurations and 
decides to forward the request to S-CSCF#3 as the UE-3 is the default UE of the PN. 

14. INVITE#2 request (PNM AS to S-CSCF#3) - see example in table A.3.4.1-14 
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Table A.3.4.1-14: INVITE#2 (PNM AS to S-CSCF#3) 

INVITE sip: PN_user3_publicl@home2.net SIP/2.0 

Via: SIP/2. 0/UDP pnmas.home2 .net;branch=z9hG4bK735zl2 .1, 

SIP/2 . 0/UDP scscf3 .home2 . net ;branch=z9hG4bK735zl2 .1, 

SIP/2 .0/UDP scscf2 .home2 . net ;branch=z9hG4bK735zl2 .1, 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 

SIP/2 .0/UDP scscf2 .home2 . net ;branch=z9hG4bK764z87 . 1 , 

SIP/2 .0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 . 0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2. 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 . 1 , 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 60 

Route : <sip : scscf 3 . home2 . net ; lr> 

Record- Route : <sip :pnmas .home2 .net; lr>,<sip:scscf3 .home2 .net; lr>,<sip:scscf2 .home2 .net; lr>, 

<sip :pnmas .home2 .net>, <sip:scscf2 .home2 .net; lr>, <sip:icscf2 .home2 .net; lr>, 

<sip:scscfl .homel .net; lr>, <sip :pcscf lohomel .net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

History-Info: 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 

v= 
o= 
s= 
c= 
t= 



15. SIP 100 (Trying) response (S-CSCF#3 to PNM AS) 

16. INVITE#2 request (S-CSCF#3 to P-CSCF-#3) -- see example in table A.3.4.1-16 

The S-CSCF#3 continues the redirected INVITE request based on the standard call setup procedures. 

Table A.3.4.1-16: INVITE#2 (S-CSCF#3 to P-CSCF#3) 

INVITE sip: [5555 : :eee: fff :aaa:bbb] : 8805;comp = sigcomp SIP/2.0 

Via: SIP/2. 0/UDP scscf 3 . home2 . net ;branch=z9hG4bK735zl2 . 1 , 

SIP/2 .0/UDP pnmas.home2 .net ;branch=z9hG4bK735zl2 .1, 

SIP/2 .0/UDP scscf 3 .home2 . net ;branch=z9hG4bK735zl2 .1, 

SIP/2 .0/UDP scscf 2 .home2 .net ;branch=z9hG4bK735zl2 .1, 

SIP/2. 0/UDP Pnmas.home2 .net;brach= z9hG4bK712z34 . 1 , 

SIP/2 .0/UDP scscf 2 .home2 .net ;branch=z9hG4bK764z87 . 1, 

SIP/2 .0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf 1. homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .homel .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 59 

Route: <sip: pcscf #3@home2 .net ; lr> 

Record-Route : <sip : scscf 3 . home2 . net ; lr> , 

<sip :pnmas .home2 .net; lr>,<sip:scscf3 .home2 .net; lr>,<sip:scscf2 .home2 .net; lr>, <sip :pnmas .home2 .net>, 
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<sip : scscf 2 . home2 . net ; lr> , <sip : icscf 2 . home2 . net ; lr> , <sip : scscf 1 . homel . net ; lr> , 

<sip ipcscf 1 .homel .net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

P- Called- Party- ID : <sip : PN_user3__publicl@home2 .net> 

Content-Type : 

Content -length: (...) 

v= 
o= 



a= 
a= 
a= 

17. Steps 17 to 30 are identical to generic session setup procedure specified in 3GPP TS 24.228 [10]. 

A.3.4.2 PN UE redirection in tine CS domain 

Figure A.3.4.2-1 provides the signaling flow for PN UE redirection in the CS domain. The GMSC will receive the ISUP 
containing calling party number and called party number. The gsmSCF will invoke the service logic in order to route 
the call to the Default-UE. 
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Figure A.3.4.2-1 : Signalling flow for PN UE redirection in the CS domain 

1. ISUPIAM 

An lAM message arrives at the GMSC#1. Specifically for this signalling flow, the lAM includes: 

Called Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12415553333)] 

Calling Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12125551 1 1 1)] 

2. MAP Send Routing Information (SRI) (GMSC#1 to HSS) 

On receipt of the incoming call request, the GMSC queries the HSS for routing information. 

3. Retrieval of PNM subscriber information 

The HSS provides information including the T-CSI information element that contains information configured for 
the PNM subscriber, identifying the subscriber as having terminating CAMEL services. The T-CSI IE also 
includes the gsmSCF address. 

4. MAP Send Routing Information Acknowledgement (SRI ACK) (HSS to GMSC#1) 

The HSS returns the T-CSI information element to the GMSC in response to the query for routing information 
(SRI). The GMSC now has the address of the gsmSCF. 

5. CAMEL IDP (GMSC to gsmSCF) 

The GMSC#1 triggers a CAMEL activity which results in sending a CAMEL IDP message to the GSM Service 
Control Function (gsmSCF). The CAMEL IDP message contains at least: 

- the calling party number; 

- the called party number; 
the type of call; and 

- Information from the T-CSI IE received by the GMSC#1 in the SRI ACK from the HSS. This includes the 
CAMEL service key. 

6. The gsmSCF invokes PNM Redirection service logic to route the call. 
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7. CAMEL CONNECT (gsmSCF to GMSC#1) 

The CAMEL service function causes the gsmSCF to respond to the CAMEL IDP message with a CAMEL 
CONNECT message containing: 

- The MSISDN of the Defauh UE: 12245678912 

8. lAM message arrived at GMSC#2 of Default UE. 

The lAM includes: 

Called Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12415553333)] 

Calling Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 
number = international number), (Number digits = 12125551 1 1 1)] 

9. ISUPIAM 

The call is routed to the Default UE. 
10-12. ISUP ACM 

In response an ACM is generated .There is no PNM specific content to this response. 

13-15. ISUP ANM 

The ANM is generated after the terminating UE answers the call. There is no PNM specific content to this 
response. 

A.3.5 Signalling flows for PN access control 
A.3.5.1 PN access control procedure in IM CN subsystem 

Figure A.3.5. 1-1 details the signalling flows for PN access control in the IM CN subsystem. 
In the following flow UE#2a is the PN controller UE and UE#2b is the PN controllee UE. 
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Figure A.3.5.1-1 : Signalling flow for PN access control procedure in IM CN subsystem 
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The steps prior to step 1 are according to the standard procedures specified in 3GPP TS 24.228 [10]. 

1. INVITE#1 (I-CSCF#2 to S-CSCF#2) 

I-CSCF-2 forwards the INVITE message to S-CSCF#2 after invocation of a location Query. 

Table A.3.5.1-1 : SIP INVITE request (l-CSCF#2 to S-CSCF#2) 

INVITE sip:PN_user2b_publicl@home2 .net SIP/2.0 
Via: SIP/2. 0/UDP icscf2 . home 2 . net ;branch=z9hG4bK871yl2 .1, 
SIP/2. 0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 
SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max- Forwards : 65 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route :<sip:scscfl .homel .net; lr>,<sip:pcscfl .visited.net; lr> 
P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 
Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=15 78 93 
To : <sip : PN_user2b_publicl®home2 . net> 
Cseq: 127 INVITE 
Call-ID:13124 3vdse 

Supported : precondition, lOOrel , gruu, 199 

Accept -Contact : * ; +g . 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 
P- Asserted- Service : urn: urn- 7 : 3gpp- service. ims .icsi .mmtel 

Contact : <sip :userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf6>;+g. 3gpp . icsi -ref="urn%3Aurn-7%3A3gpp- service . ims .icsi .mmtel" 
Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE, REFER, MESSAGE 
Accept: application/sdp, application/3gpp-ims+xml 
Content-Type: application/sdp 
Content-length: (...) 

v=0 

o=- 2987933615 2987933615 IN IP6 5555 :: aaa : bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap:l RTP/AVPF 

a=pcfg:l t=l 

b=AS:25 .4 

a=curr:qos local none 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7; maxframes=2 

a=rtpmap:96 telephone-event 

2. 100 Trying 

S-CSCF#2 responds to the INVITE#1 request with a 100 Trying provisional response. 

Table A.3.5.1-2: SIP 100 Trying 

SIP/2.0 100 Trying 

Via: SIP/2. 0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf 1. homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

From: 

To: 

Call-ID: 

CSeq: 

Content-Length: 

3. Evaluation of Initial Filter Criteria 

S-CSCF#2 validates the service profile of this subscriber and evaluates the initial filter criteria. 

4. INVITE#1(S-CSCF#2 to PNM AS) 
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S-CSCF#2 forwards the INVITE#1 request to the PNM AS based upon the initial filter criteria (IPCs). 
Table A.3.5.1-4: SIP INVITE request (S-CSCF#2 to PNM AS) 



INVITE sip:PN_user2b_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf 2 . home2 . net ;branch=z9hG4bwt871yl2 . 1 , 

SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscf l.homel. net ;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 64 

Route: <sip :pnmas .home2 .net ; lr> 

Record- Route : <sip:scscf2 .homel .net; lr>,<sip:scscfl .homel .net; lr>, <sip : pcscf 1 .visited.net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 

v= 
o= 
s = 
c= 
t= 



5. 100 Trying 

The PNM AS responds to the INVITE#1 request with a 100 Trying provisional response. 

Table A.3.5.1-5: SIP 100 Trying 



SIP/2 


.0 100 


Trying 














Via: 


3IP/2. 


D/UDP scscf 2 .home2 .net ;branch=z9hG4bwt871yl2 


1, 






SIP/2 


.0/UDP 


icscf 2 


home2 . net 


branch= 


=z9hG4bK871yl2.1, 








SIP/2 


.0/UDP 


scscf 1 


homel .net 


branch: 


=z9hG4bK332b23.1, 








SIP/2 


.0/UDP 


pcscf 1 


visitedl. net;branch=z9hG4bK240f 34.1, 








SIP/2 


.0/UDP 


[5555: 


aaa : bbb : ccc : ddd] 


1357;comp=sigcomp;branch= 


z9hG4bKna 


3hds7 


From: 


















To: 


















Call- 


ID: 
















CSeq: 
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6. PN access control 

The PNM AS invokes the Private network service logic. As userl_publicl @homel.net is not on the 
<PNAccessControlList> of PN_user2b_publicl @home2.net the PN access controller needs to be contacted. 

7. INVITE#2 (PNM AS to S-CSCF#2) 
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The PNM AS generates a new INVITE request message called INVITE#2 and sends it to S-CSCF#1 in order to 
interact with the PN controller UE. 

Table A.3.5.1-7: SIP INVITE request (PNM AS to S-CSCF#2) 

INVITE sip:PN_user2a_publicl@home2 .net ; target=PN_user2b_publicl@home2 .net SIP/2 . 

Via: SIP/2. 0/UDP pnmas .home2 .net;branch=z9hG4bwt871yl2 . 1 

Max- Forwards : 70 

Route : <sip : scscf 2 . home2 . net ; lr> 

P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 

Privacy: 

From: <sip : pnmas .homel .net>; tag=r3rw33 

To : <sip : PN_user2a_publicl®home2 . net> 

Cseq: 

Call-ID: 

Supported: precondition, lOOrel, 199, histinfo 

Contact: <sip :pnmas . home2 . net> 

History- Info : <sip : PN_user2b_publicl@home2 .net>; index=l, 

<sip : PN_user2a_publicl@home2 . net ; target=PN_user2b_publicl®home2 . net> ; index=l . 1 

Accept -Contact : * ; +g. 3gpp . iari-ref="urn%3Aurn-7%3A3gpp- application. ims . iari .pnm- controller" 

P-Asserted-Service : 

Allow: 

Accept : 

Content-Type : 

Content -length: (...) 



Request-URI: contains the URI of the PN controller UE (PN_user2a_publicl @home2.net) obtained from the 

<PNController> element along with the target uri-parameter which contains the URI from the 
original Request-URI (PN_user2b_publicl@home2.net). 

P-Asserted-Identity: the identity of the originator ("John Doe" <sip:userl_publicl@homel.net>). 

From: contains the SIP URI of the PNM AS (sip: pnmas.homel.net). 

To: contains the URI of the PN controller UE ( PN_user2a_publicl @ho me2.net). 

Supported: contains the following option tags: precondition, lOOrel, 199, histinfo. 

Contact: a SIP URI that contains the IP address or FQDN of the PNM AS. 

History-Info: contains the URIs from the original Request-URI (PN_user2b_publicl @home2.net) and the 

URI of the PN controller UE (PN_ user2a_publicl @ho me2.net). 

Accept-Contact: contains the g.3gpp.iari-ref media feature tag with the IARI value "urn%3Aurn-7%3A3gpp- 
application.ims .iari.pnm-controller" . 

8. 100 Trying 

S-CSCF#2 responds to the INVITE#2 request with a 100 Trying provisional response. 



£75/ 



3GPP TS 24.259 version 1 0.1 .0 Release 1 55 ETSI TS 1 24 259 V1 0.1 .0 (201 1 -1 0) 

Table A.3.5.1-8: SIP 100 Trying 



SIP/2.0 100 Trying 

Via: SIP/2. 0/UDP pnmas .home2 .net;branch=v7hG4bwtl71yl2 . 1 

To: 

Call-ID: 

CSeq: 

Content-Length: 



9. INVITE#2 (S-CSCF#2 to P-CSCF#2a) 

S-CSCF#2 forwards the INVITE#2 request to P_CSCF#2a. 

Table A.3.5.1-9: SIP INVITE request (S-CSCF#2 to P-CSCF#2a) 



INVITE sip: [5555 : :eee: fff :aaa:bbb] : 8805;comp = sigcomp SIP/2.0 

Via: SIP/2. 0/UDP scscf 2 . home2 . net ;branch=z9hG4bwt871yl2 . 1 , 

SIP/2 . 0/UDP pnmas .home2 .net ;branch=z9hG4bwt871yl2 . 1 

Max- Forwards : 69 

Route : <sip:pcscf2a . visited2 .net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

Contact : 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Allow: 

Accept : 

P- Called- Party- ID : <sip : PN_user2a_publicl®home2 .net /target =PN_user2b_publicl®home2 .net> 

Content-Type : 

Content -length: (...) 

v= 
o= 
s = 



10. 100 Trying 

P-CSCF#2a responds to the INVITE#2 request with a 100 Trying provisional response. 

Table A.3.5.1-10: SIP 100 Trying 



SIP/2.0 100 
Via: SIP/2. 
SIP/2. 0/UDP 
To: 


Trying 
0/UDP scscf2 
pnmas .home 2 


home 2 .net ; 
net /branch 


branch=z9hG4bwt8 71yl2 
=z9hG4bwt871yl2.1 


1, 


Call-ID: 














CSeq: 
Content-Length: 













11. INVITE #2 (P-CSCF#2a to UE-2a) 
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P-CSCF#2a sends the INVITE#2 to UE-2a (controller UE) 

Table A.3.5.1-11 : SIP INVITE request (P-CSCF#2a to UE-2a) 



INVITE sip: [5555 : :eee : fff :aaa:bbb] : 8805;comp = sigcomp SIP/2.0 

Via: SIP/2. 0/UDP pcscf 2a . visited2 . net ;branch=z9hG4bK240f 34 . 1 , 

SIP/2. 0/UDP scscf2 .home2 .net ;branch=z9hG4bwt871yl2 .1, 

SIP/2 . 0/UDP pnmas .homel .net ;branch=k9hG4bwt871yl2 . 1 

Max- Forwards : 68 

Record- Route : <sip : pcscf 2a . visited2 .net ; lr>, 

<sip : scscf 2 . home2 . net ; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Require : 

Supported: 

Contact : 

History-Info : 

Accept-Contact : 

P-Asserted-Service : 

Allow: 

Accept : 

P-Called-Party-ID: 

Content-Type : 

Content-length: (...) 

v= 
o= 
s = 



12. 100 Trying 

UE-2a responds to the INVITE#2 request with a 100 Trying provisional response. 

Table A.3.5.1-12: SIP 100 Trying 



SIP/2.0 100 Try: 


ng 












Via: SIP/2. 0/UDP 


scscf 2 . 


home 2 


.net 


branch=z9hG4bwt8" 


lyl2.1, 


SIP/2. 0/UDP pnmas. home2 


.net ; 


branch: 


=v7hG4bwtl71yl2 


1 


To: 














Call-ID: 














CSeq: 














Content-Length: 
















13. PNM Privacy Decision 

Based upon the lARl value the PN controller UE invokes the FN controller application. The PN controller 
application provides the originators identity from the P-Asserted-Identity header, the PN controllee UE identity 
from the target URI-parameter in the Request-URI to the user and provides the option to the user to either: 

1 . Forward the session to the controllee UE 

2. Reject the session 
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3. Accept the session 
In the example the user determines to forward the sesssion to the controllee UE. 
14. 302 Moved Temporarily 

The PN controller UE sends a SIP 302 Moved Temporarily response to pcscf2a.visited2.net. 

Table A.3.5.1-14: SIP 302 Moved Temporarily 



SIP/2.0 302 Moved Temporarily 

Via: SIP/2. 0/UDP pcscf 2 . visited2 . net ;branch=z9hG4bK240f 34 . 1 , 

SIP/2 . 0/UDP scscf2 .home2 .net ;branch=z9hG4bwt871yl2 .1, 

SIP/2 . 0/UDP pnmas .home2 .net ;branch=k9hG4bwt871yl2 . 1 

From: 

To: 

Call-ID: 

CSeq: 

History- Info : <sip : PN_user2b_publicl®home2 .net>; index=l, 

<sip : PN_user2a_publicl@home2 . net ; target=PN_user2b_publicl@home2 . net> ; index=l . 1 

Contact : <sip : PN_user2b_publicl@home2 . net> 

Content-Length: 



Contact: a URI that contains the address of the PN controllee UE (PN_user2b_publicl @home2.net). 

History-info: contains the URIs from the History-Info header in the original INVITE (PN_ 

user2b_publicl @home2.net and PN_user2a_publicl @home2.net). 

15. 302 Moved Temporarily 

P-CSCF#2a forwards the 302 Moved Temporarily response to S-CSCF#2. 

Table A.3.5.1-15: SIP 302 Moved Temporarily 



SIP/2.0 302 Moved Temporarily 

Via: SIP/2. 0/UDP scscf2 .home2 .net;branch=z9hG4bwt871yl2 .1, 

SIP/2 . 0/UDP pnmas .home2 .net ;branch=k9hG4bwt871yl2 . 1 

From: 

To: 

Call-ID: 

CSeq: 

History-Info : 

Contact : <sip : PN_user2b_publicl@home2 . net> 

Content-Length : 



16. 302 Moved Temporarily 

S-CSCF#2 forwards the 302 Moved Temporarily response to the PNM AS. 

Table A.3.5.1-16: SIP 302 Moved Temporarily 



SIP/2.0 


3 02 Movec 


Tempo 


rarily 








Via: SIP/2. 0/UDP 


pnmas . 


home2 .net 


branch=k9hG4bwt8 7 


lyl2 . 1 


From: 














To: 














Call-ID 














CSeq: 














History- 


Info: 












Contact 


<sip : PN 


user2b 


public l@home2 


net> 




Content - 


Length: 













17. PN UE redirection 

Upon receiving the 302 Moved Temporarily response from the controller UE, the PNM AS determines the 
session is to be redirected to the controllee UE. 

18. INVITE#3 (PNM AS to S-CSCF#2) 
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The PNM AS forwards the Originating INVITE message to S-CSCF#2. 

Table A.3.5.1-18: SIP INVITE request (PNM AS to S-CSCF#2) 

INVITE sip:PN_user2b_publicl@home2 .net SIP/2.0 
Via: SIP/2 . 0/UDP pnmas . home2 .net ;branch=z9hG4bwt871yl2 . 1 
SIP/2 .0/UDP scscf2 .home2 .net ;branch=z9hG4bwt871yl2 .1, 
SIP/2 .0/UDP icscf2 .home2 . net ;branch=z9hG4bK871yl2 .1, 
SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 
SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 
Max-Forwards: 63 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route : <sip:scscf2 .homel .net; lr>,<sip:scscfl .homel .net; lr>,<sip:pcscfl.visited.net;lr> 
P-Asserted-Identity : "John Doe" <sip :userl_publicl®homel .net> 
Privacy: 

From: <sip :userl_publicl@homel .net>; tag=157893 
To : <sip : PN_user2_publicl@home2 . net> 
Cseq: 
Call-ID: 

Supported: precondition, lOOrel, 199, histinfo 

Contact : <sip : userl_publicl®homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lld0-a76 5- 
00a0c91e6bf6>;+g. 3gpp . icsi-ref ="urn%3Aurn- 7 %3A3gpp- service. ims . icsi .mmtel" 
History- Info : <sip : PN_user2b_publicl@home2 .net>; index=l, 

<sip : PN_user2a__publicl@home2 . net ; target=PN_user2b_publicl@home2 . net> ; index=l . 1 , 
<sip : PN_user2b_publicl@home2 .net?Reason=SIP;cause=3 02>; index=l . 2 
Accept -Contact : * ;g. 3gpp. icsi-ref ="urn%3Aurn- 7 %3A3gpp- service . ims .icsi .mmtel" 
P-Asserted-Service : 
Allow: 

Content-Type : 
Content -length: (...) 



Request-URI: contains the URI of the PN controller UE (PN_user2a_publicl @home2.net) obtained from the 

<PNController> element along with the target uri-parameter which contains the URI from the 
original Request-URI (PN_user2b_publicl@home2.net). 

P-Asserted-Identity: the identity of the originator ("John Doe" <sip: userl_publicl @homel .net>). 

From: contains the SIP URI of the PNM AS (sip: pnmas.homel.net). 

To: contains the URI of the PN controller UE (PN_user2a_publicl @home2.net). 

Supported: contains the following option tags: precondition, lOOrel, 199, histinfo. 

Contact: the contents of the Contact header in the original INVITE (<sip: 

Userl_publicl@homel.net;gr=urn:uuid:f81d4fae-7dec-lld0-a765-00a0c91e6bf6>). 

History-info: contains the URIs from the History-Info header in the 302 Moved Temporarily response 

(PN_user2b_publicl @home2.net and PN_user2a_publicl @home2.net) with the addition of the 
URI of the PN controllee UE (PN_user2b_publicl @ho me2.net) from the Contact header in the 
302 Moved Temporarily response along with the reason code 302. 
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Accept-Contact: contains the g.3gpp.icsi-ref media feature tag with the ICSI value from the Accept-Contact 
header in the original INVITE ("urn%3Aurn-7%3A3gpp-service.ims.icsi.mmtel"). 

19-34. These flows follow the standard session establishment procedures specified in 3GPP TS 24.228 [10]. 

A.3.5.2 PN access control procedure in CS domain. 

Figure A. 3. 5. 2-1 provides the signalling flows for the PN access control procedure in the CS domain. PN access control 
services deal with a user having access control over its personal network. 
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Figure A.3.5.2-1 Signalling flow for PN access control in the CS domain 

1. ISUPIAM 

A Call Request containing an lAM message arrives at the GMSC. 
Specifically for this signalling flow, the lAM includes: 

- Calling Party number =12134587692 

- Called Party Number parameter = [(Numbering plan identifier = ISDN/telephony numbering plan), (type of 

number = international number), (Number digits = 15346789043)] 

2. MAP Send Routing Information (SRI) 
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On receipt of the incoming call request, the GMSC queries the HSS for routing information. 

3. Retrieval of PNM subscriber information 

The HSS identifies the subscriber as a PNM subscriber and provides the configured terminated CAMEL 
subscription information (T-CSI) towards the GMSC in the SRI-ACK. 

4. MAP Send Routing Information Acknowledgement (SRI ACK) 

The HSS returns the T-CSI information element which includes the gsmSCF address to the GMSC in response 
to the query for routing information (SRI). 

5. CAMEL IDF (GMSC to gsmSCF) 

The GMSC#1 triggers a CAMEL activity which results in sending a CAMEL IDP message to the GSM Service 
Control Function (gsmSCF). The CAMEL IDP message contains at least: 

the calling party number; 

- the called party number; 
the type of call; and 

- information from the T-CSI IE received by the GMSC#1 in the SRI ACK from the HSS. This includes the 
CAMEL service key. 

6. PN access control 

The gsmSCF performs the PN access control. Since the calling party is not configured in the PN access control 
list, the gsmSCF needs to ask the controller UE to grant the access to the calling party. 

7-8. MAP-UNSTRUCTURED-SS-REQUEST (gsmSCF to HSS) 

As part of this process the gsmSCF starts the timer to supervise the call establishment and sends a MAP- 
UNSTRUCTURED-SS-REQUEST message to the HSS. The message contains the following information. 

USSD String:- CalHng Number 12134587692 and called Number 15346789043. 

9. MAP-UNSTRUCTURED-SS-REQUEST (HSS to MSC/VLR) 

The HSS relays the USSD request message to the MSC/VLR. It contains the following information. 
USSD String:- Calhng Number 12134587692 and called Number 15346789043. 

10. REGISTER (MSC/VLR to controller UE) 

This message is used between MSC/VLR and the UE to get the access granted for the incoming call. It contains 
the following information. 

Facility (Invoke=UNSTRUCTURED-SS-REQUEST(USSD-Data-Coding-Scheme, USSD String)) 

11-13. When the timer expires, the gsmSCF generates a play announcement message containing Tone ID and 
Duration parameters as specified in 3GPP TS 29.078 [13]. 

14. FACILITY (controller UE to MSC/VLR) 

The controller UE will send the FACILITY message back to the MSC/VLR. It contains the following 
information. 

Facility (ReturnResult=UNSTRUCTURED-SS-REQUEST (USSD-Data-Coding-Scheme, USSD String)) 
which inform that the call is accepted. 

15-16. MAP-UNSTRUCTURED-SS-REQUEST-Ack (MSC/VLR to HSS) 

After receiving the FACILITY message from the controller UE, the MSC/VLR sends an USSD message towards 
the gsmSCF via the HSS. It contains the following information. 

Facility (ReturnResult=UNSTRUCTURED-SS-REQUEST(USSD-Data-Coding-Scheme, USSD String)) 
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17. As the user responds, the gsmSCF stops playing the announcement by sending a DisconnectForwardConnection 
message to the GMSC. 

NOTE: If the user responds before the timer started in step 7 expires, steps 12, 13 & 17 are skipped. 

18. Call Continue/Release Call (HSS to GMSC) 

Based on the response of the controller UE the gsmSCF sends a CAMEL CONTINUE or CAMEL RELEASE 
message to the GMSC. 

19-20. MAP Send Routing Information (SRI) 

On receipt of the call continue message, the GMSC queries again the HSS for the routing information for the 
called party but this time with the parameter Suppress T-CSI. 

21. MAP SRI Ack 

The HSS executes the roaming number enquiry procedure and sends this information back to the GMSC within 
the SRI-Ack containing MSRN=15346787943. 

22. Call setup 

The GMSC starts the normal call setup towards the visited MSC of the called party to establish the call. 

A.3.6 Signalling flows for intercdomain networking 
A.3.6.1 IM CN subsystem to CS domain 

Figure A.3.6-1 details the signaling flows for inter-domain networking from IM CN to CS domain. 
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Figure A.3.6-1: interdomain networking: (IIVI CN-CS) 

1. INVITE request (I-CSCF#2 to S-CSCF#2) 

The UE initiates the INVITE request with the request-URI of the UE-1 to the IM CN subsystem entities. 
There is no PNM specific content to this request. 

Table A.3.6-1 -1 : INVITE request (l-CSCF#2 to S-CSCF#2) 

INVITE sip:PN_user2 jublicl@home2 .net SIP/2.0 

Via: SIP/2 .0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357 ; comp=sigcomp;branch=z9hG4bKnashds7 

Max-Forwards: 65 

Route : <sip : scscf 2 . home2 . net ; lr> 

Record- Route :<sip:scscfl .homel .net; lr>,<sip:pcscfl .visited.net; lr> 

P-Asserted-Identity : "John Doe" <sip :userl_publicl@homel .net> 

Privacy: none 

From: <sip :userl_publicl@homel .net>; tag=15 78 93 

To : <sip : PN_user2_publicl®home2 . net> 

Cseq: 127 INVITE 

Call-ID:13124 3vdse 

Supported : precondition, lOOrel , gruu, 199 

Accept -Contact : * ;+g. 3gpp. icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 

P- Asserted- Service : urn: urn- 7 : 3gpp- service . ims .icsi .mmtel 
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Contact : <sip : userl_publicl@homel .net ;gr=urn:uuid: f 81d4f ae-7dec-lldO-a765-OOaOc91e6bf 6g. 3gpp . icsi- 

ref ="urn%3Aurn-7%3A3gpp-service . ims . icsi .mmtel" 

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE, REFER, MESSAGE 

Accept: application/sdp, application/3gpp-ims+xml 

Content-Type: application/sdp 

Content -length: (...) 

v=0 

o = - 2987933S15 2987933615 IN IPS 5555 : : aaa :bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap : 1 RTP/AVPF 

a=pcfg:l t=l 

b=AS:2 5.4 

a=curr:qos local none 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7 ; maxframes=2 

a=rtpmap:96 telephone-event 

2. SIP 100 (Trying) response 

S-CSCF#2 responds to the INVITE#1 request with a 100 Trying provisional response. 

3. Evaluation of initial filter criteria 

S-CSCF#2 validates the service profile of this subscriber and evaluates the initial filter criteria. 

4. INVITE#1 request (S-CSCF#2 to PNM AS) 

S-CSCF#2 forwards the INVITE#1 request to the PNM AS based upon the initial filter criteria (IPCs). 

Table A.3.6-1-4: INVITE request (S-CSCF#2 to PNM AS) 

INVITE sip:PN_user2_publicl@home2 .net SIP/2.0 

Via: SIP/2. 0/UDP scscf2 .home2 .net;branch=z9hG4bwt871yl2 .1, 

SIP/2. 0/UDP icscf2 .home2 .net ;branch=z9hG4bK871yl2 .1, 

SIP/2 .0/UDP scscfl.homel.net;branch=z9hG4bK332b23 .1, 

SIP/2 . 0/UDP pcscf 1 .visitedl .net;branch=z9hG4bK240f 34 .1, 

SIP/2. 0/UDP [5555: : aaa : bbb : ccc : ddd] : 1357,-comp=sigcomp,-branch=z9hG4bKnashds7 

Max-Forwards: 64 

Route: <sip :pnmas .home2 .net ; lr> 

Record- Route : <sip:scscf2 .homel .net; lr>,<sip:scscfl .homel .net; lr>,<sip:pcscfl .visited.net; lr> 

P-Asserted- Identity : 

Privacy: 

From: 

To: 

Cseq: 

Call-ID: 

Supported: 

Accept-Contact : 

P-Asserted-Service : 

Contact : 

Allow: 

Content-Type : 

Content-length: (...) 

v= 
o= 
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5. SIP 100 (Trying) response (PNM AS to S-CSCF#2) 

The PNM AS responds to the INVITE#1 request with a 100 Trying provisional response. 
There is no PNM specific content to this response. 

6. PNM session redirection service control 

The PNM AS executes the PNM redirection service control logic in order to route the call to the default UE 
located in the CS domain. 

In this example the MSISDN of the called party is +1237654799942 

7. Steps 7 to 26 are identical to generic session setup procedure specified in 3GPP TS 24.228 [10]. 

A.3.6.2 CS domain to IM CN subsystem 

Figure A.3.6-2 shows the signaling flows for inter-domain networking from CS domain to IM CN subsystem. 
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Figure A.3.6-2: Inter-domain networking: (CS-IM CN) 

1. ISUP lAM (coming from the originating PLMN through the CS domain) 

In this example, a call request (ISUP lAM) makes an entry from the PLMN of the originating user (calling party) 
into the home PLMN of the terminating user (called party). The first entry point of the PLMN of the terminating 
user is the Gateway MSC (GMSC). The call request is a form of an ISUP lAM (Initial Address Message) and 
contains the called party number (MSISDN). 
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In this example the MSISDN of the called party is +12134567897 

2. MAP Send Routing Information (SRI) (GMSC to HSS) 

On receipt of the incoming call request, the GMSC queries the HSS for routing information. 

3. Retrieval of PNM subscriber information 

The HSS provides information including the T-CSI information element that contains information configured for 
the PNM subscriber, identifying the subscriber as having terminating CAMEL services. The T-CSI IE also 
includes the gsmSCF address. 

4. MAP send routing information acknowledgement (SRI ACK) (HSS to GMSC) 

The HSS returns the T-CSI information element to the GMSC in response to the query for routing information 
(SRI). The GMSC now has the address of the gsmSCF. 

5. CAMEL IDP (GMSC to gsmSCF) 

The GMSC triggers a CAMEL activity which results in sending a CAMEL IDP message to the GSM service 
control function (gsmSCF). The CAMEL IDP message contains at least: 

the calling party number; 

the called party number; 

the type of call; and 

- information from the T-CSI IE received by the GMSC in the SRI ACK from the HSS. This includes the 
CAMEL service key. 

6. Reroute to IMS determination 

The gsmSCF invokes PNM redirection service logic to determine whether the call needs to be rerouted to the 
default UE located in the IM CN subsystem for UE redirection. 

7. CAMEL CONNECT (gsmSCF to GMSC) 

The CAMEL service function causes the gsmSCF to respond to the CAMEL IDP message with a CAMEL 
CONNECT message containing 

MSISDN of defauhUE: 12134567897 

8. IAM#2(GMSC to MGCF) 

The GMSC generates the IAM#2 containing the MSISDN of the default UE at which the call is to be redirected 
and signals it to the MGCF. 

MSISDN of defauhUE: 12134567897 

9. SIP INVITE (MGCF to S-CSCF) 

The MGCF interworks the lAM into the appropriate SIP message and initiates the SIP INVITE request towards 
the S-CSCF via the intermediate IM CN subsystem entities. 

(MGCF towards the S-CSCF through the intermediate IM CN subsystem entities) - see example in table A.3.Y1 
Table A.3.6-2-9: SIP INVITE request (MGCF to S-CSCF) 



INVITE tel: +12134567897 SIP/2.0 




Via: SIP/2. 0/UDP mgcf. homel.net ;branch=z9hG4bK779s24.0 




Max- Forwards : 69 




Route : <sip : icscf 1 .homel .net; lr> 




P-Asserted- Identity: <tel : +1-212 -555- 1111> 




P- Charging- Vector: icid-value= "AyretyU0dm+6O2IrT5tAFrbHLso=02 3 551024 " ; 


orig- ioi=homel . net 


Privacy: none 




From: <tel : +l-212-555-llll> ; tag=17182 8 




To: <tel:+ 12134567897> 




Call -ID: Cb03a0s0 9a2sdfglkj 490333 
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Cseq: 127 INVITE 

Supported: precondition, lOOrel 

Accept -Contact : * ; +g. 3gpp . icsi-ref="urn%3Aurn-7%3A3gpp- service . ims . icsi .mmtel" 

P- Asserted- Service : urn: urn- 7 : 3gpp- service . ims .icsi .mmtel 

Contact : <sip :mgcf 1 .homel .net>; +g. 3gpp . icsi -ref="urn%3Aurn-7%3A3gpp- service . ims .icsi .mmtel" 

Allow: INVITE, ACK, CANCEL, BYE, PRACK, UPDATE 

Content-Type: application/sdp 

Content-Length: (...) 

v=0 

o = - 2987933615 2987933615 IN IP6 5555 : : aaa :bbb : ccc : ddd 

s = - 

c=IN IP6 5555 :: aaa: bbb: CCC: ddd 

t = 

m=audio 3456 RTP/AVP 97 96 

a=tcap:l RTP/AVPF 

a=pcfg:l t=l 

b=AS:2 5.4 

a=curr:qos local sendrecv 

a=curr:qos remote none 

a=des:qos mandatory local sendrecv 

a=des:qos none remote sendrecv 

a=inactive 

a=rtpmap:97 AMR 

a=fmtp:97 mode-set=0 , 2 , 5 , 7 ; maxframes=2 

a=rtpmap:96 telephone-event 

10. SIP 100 (Trying) response (S-CSCF to MGCF via intermediate IM CN subsystem entities) 

The S-CSCF responds to the intermediate IM CN subsystem entities with a SIP 100 (Trying) response. 

11. INVITE - S-CSCF forwards the INVITE request to the default UE. 

12. Steps 12 to 21 are identical to generic session setup procedure specified in 3GPP TS 24.228 [10]. 



A. 4 Example XML document 
A.4.1 Introduction 

Table A.4.1-1 shows an example of an XML document compliant to the XML schema defined in annex B. The example 
shows the PNM configuration for multiple FN UEs sharing the same public user identity. 

NOTE: The PN UEs are uniquely identified by their PNUENames. The association of PNUENames with PN UE 
devices has to be defined by the PNM operator and is out of scope of this specification. 

All line feeds within element contents are for display purposes only. 

Table A.4.1-1 : Example XML document 

<?xml version="l . 0" encoding="utf -8" ?> 

<PNConf iguration xxmlns="uri : 3gpp :pnm" xmlns :xsi="http : //www. w3 . org/2 001/XMLSchema- instance" > 
<UERedirection UriOfRedirectedUser="sip : PN_userl_publicl@homel . com"> 
<RedirectedUserID> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_1 < / PNUEName > 
</RedirectedUserID> 
<RedirectingUserID id=l> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_2 < / PNUE I D > 

<RedirectionLevel>application< /Redirect ionLevel> 
<RedirectionPrio>l< /Redirect ionPrio> 

</RedirectingUserID> 
<RedirectingUserID id=2> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_3 < / PNUEName > 

<RedirectionLevel>application< /Redirect ionLevel> 
<RedirectionPrio>2</RedirectionPrio> 

</RedirectingUserID> 
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</UERedirection> 

<AccessControl UriOf ControllerUE="sip : PN_userl_publicl@homel . com" > 
<ControllerUE> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_1 < / PNUE I D > 
</ControllerUE> 
<ControlleeUE id=l> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_2 < / PNUEName > 

<PNAccessControlList>sip : user2_publicl@homel . com sip : user3_publicl@homel . com 
sip : user4_publicl@homel . com </PNAccessControlList> 

<PNAccessControlType>Cont roller </PNAccessControlType> 
</ControlleeUE> 
<ControlleeUE id=2> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 

< PNUEName > PN_3 < / PNUEName > 

<PNAccessControlList>sip : user5_publicl@homel . com</PNAccessControlList> 
<PNAccessControlType>NonController</PNAccessControlType> 
</ControlleeUE> 
</AccessControl> 
<Nameof PNUE> 

<PNUEID>sip : PN_userl_publicl@homel . com</PNUEID> 
<UEName id=l> 

<Name > PN_1 < /Name > 
</UEName> 
<UEName id=2> 

<Name > PN_2 < /Name > 
</UEName> 
<UEName id=3> 

<Name > PN_3 < /Name > 
</UEName> 
</NameofPNUE> 
</PNConf iguration> 
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Annex B (normative): 

PNM XML schema definition 

B.1 XIVIL elements structure 

Table B.1-1 below shows the XML elements structure hierarchically. 
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Table B.1-1 : XML elements structure 

PNConfiguration: 
UERedirection: 

Redirected UserlD 

PNUEID 

PNUEName 
RedirectingUserlD id=1 

PNUEID 

PNUEName 

RedirectionLevel 

RedirectionPrio 

RedirectingUserlD id=Q 

PNUEID 

PNUEName 

RedirectionLevel 

RedirectionPrio 
PNERedirection: 

Redirected UserlD 

PNUEID 

PNEID 

PNEName 
RedirectingUserlD id=1 

PNEID 

PNEName 

RedirectionLevel 

RedirectionPrio 

RedirectingUserlD id=Q 

PNEID 

PNEName 

RedirectionLevel 

RedirectionPrio 
AccessControl: 

ControllerUE 

PNUEID 

PNUEName 
ControlleeUE id=1 

PNUEID #1 

PNUEName #1 

PNUEID #N 
PNUEName #N 
PNAccessControlList 
PNAccessControlType 

ControlleeUE id=M 
PNUEID #1 
PNUEName #1 

PNUEID #P 

PNUEName #P 

PNAccessControlList 

PNAccessControlType 
PNE AccessControl: 
ControllerUE 

PNUEID 

PNUEName 
ControlleePNE id=1 

PNEID #1 

PNEName #1 

PNEID #N 
PNEName #N 
PNAccessControlList 
PNAccessControlType 

ControlleePNE id=M 
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PNEID#1 
PNEName#1 

PNEID#P 
PNEName#P 
PNAccessControlList 
PNAccessControlType 

NameofPNUE 

PNUEID (Shared IMPU) 
UEName id=1 
Name 

UEName id=R 
Name 



B.2 XML schema for PNM 



Table B.2-1 contains the XML schema definition for an XML document for the FN configuration and query over the Ut 
interface. 

Table B.2-1 : XML schema for PNM 

<?xml version="l . 0" encoding="UTF-8" ?> 
<xs : schema targetNamespace="uri : 3gpp :pnm" 

xmlns= "uri : 3gpp : pnm" 

xmlns :xs="http: //www.w3 . org/2 01/XMLSchema" 

elementFormDefault=" qualified" attributeFormDefault=" unqualified" > 

<!-- This import brings in the XML language attribute xml:lang--> 
<xs : import namespace="http : //www.w3 .org/XML/1998 /namespace" 
schemaLocation="http : //www.w3 . org/2 01/xml .xsd"/> 

<!-- The PNConf iguration element --> 

<xs: element name=" PNConf iguration" type="pnConf Request "/> 
<xs:element name="PNUEID" type="xs : anyURI"/> 
<xs:element name="PNUEName" type="xs : string" /> 

<!-- The whole PNM PN-conf iguration specific data set --> 
<xs : complexType name="pnConf Request" > 

<xs : sequence minOccurs=" 0" maxOccurs="unbounded" > 
<xs : choice> 

<xs:element name="UERedirection" type="UERedirectionType"/> 
<xs:element name="AccessControl" type="AccessControlType"/> 
<xs:element name =" NameofPNUE" type="PNUENameType"/> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccurs= " unbounded" / > 
</xs : choice> 
</xs : sequence> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 

<xs : anyAttribute namespace="##other" processContents="lax" > 
</xs : complexType> 

<!-- The UERedirection data set --> 
<xs : complexType name="UERedirectionType" > 
<xs : sequence> 

<xs:element name="RedirectedUserID" maxOccurs="l" > 
<xs : complexType> 
<xs : sequence> 

<xs:element ref ="pnm: PNUEID"/> 
<xs : element ref =" pnm: PNUEName"/> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 
<xs : any namespace="##other" processContents="lax" minOccurs=" 0" 
maxOccur s = " unbounded " / > 

</xs : complexType> 

<xs : anyAttribute namespace="##other" processContents="lax" > 
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</xs : element > 

<xs:element name="RedirectingUserID" minOccurs="0" maxOccurs="unbounded" > 
<xs : complexType> 
<xs : sequence> 

<xs: element ref ="pnm: PNUEID"/> 
<xs : element ref ="pnm: PNUEName"/> 

<xs : element name="RedirectionLevel" type="RedirectionLevelType" 
minOccurs= " " / > 

<xs:element name="RedirectionPrio" type="positiveInteger" minOccurs=" 0"/> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOc cur s = " unbounded " / > 

<xs : attribute name="id" type="xs ipositivelnteger" use="required"/> 
<xs : anyAttribute namespace="##other" processContents="lax"> 
</xs : complexType> 
</xs : element > 
</xs : sequence> 

<xs : attribute name="UriOfRedirectedUser" type="xs : anyURI" use=" required" /> 
<xs : anyAttribute namespace="##other" processContents="lax" > 
</xs : complexType> 

<!-- The AccessControl data set --> 
<xs : complexType name="AccessControlType" > 
<xs : sequence> 

<xs: element name="ControllerUE" maxOccurs="l" > 
<xs : complexType> 
<xs : sequence> 

<xs:element ref ="pnm: PNUEID"/> 
<xs : element ref ="pnm: PNUEName"/> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 

<xs : any namespace="##other" processContents="lax" minOccurs=" 0" 
maxOccur s= " unbounded" / > 

<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 
</xs : element> 

<xs:element name="ControlleeUE" minOccurs="0" maxOccurs="unbounded" > 
<xs : complexType> 

<xs : sequence minOccurs="0" maxOccurs="unbounded" > 
<xs:element ref ="pnm: PNUEID"/> 
<xs : element ref ="pnm: PNUEName"/> 

<xs : any namespace="##other" processContents="lax" minOccurs=" 0" 
maxOccur s = " unbounded " / > 

</xs : sequence> 

<xs:element name="PNAccessControlList" type="ACListType" minOccurs=" 0"/> 
<xs:element name="PNAccessControlType" type="ACType" minOccurs="0"/> 
<xs : any namespace="##other" processContents="lax" minOccurs="0" 
maxOccur s = " unbounded " / > 

<xs : attribute name="id" type="xs ipositivelnteger" use=" required" /> 
<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 
</xs : element > 
</xs : sequence> 

<xs : attribute name="UriOf ControllerUE" type="xs : anyUIR" use=" required" /> 
<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 

<!-- The PNUEName data set --> 

<xs : complexType name="PNUENameType" > 

<xs:element ref ="pnm: PNUEID" maxOccurs="l"/> 

<xs : sequence maxOccurs="unbounded" > 

<xs:element name="UEName" type="UENameType"/> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 

</xs : sequence> 

<xs : any namespace="##other" processContents="lax" minOccurs=" 0" maxOccurs="unbounded"/> 

<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 

<xs : complexType name="UENameType" > 

<xs : sequence maxOccurs="unbounded" > 

<xs:element name="Name" type="xs : string" /> 

<xs : any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 
</xs : sequence> 

<xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> 
<xs : attribute name="id" type="xs ipositivelnteger" use=" required" /> 
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<xs : anyAttribute namespace="##other" processContents="lax"/> 
</xs : complexType> 

<!-- The Simple Types --> 

<xs : simpleType name="RedirectionLevelType"> 
<xs : restriction base="xs : string" > 

<xs : enumeration value=" application" /> 
<xs : enumeration value="component"/> 
</xs : restriction> 
</xs : simpleType> 

<xs : simpleType name="RedirectionPrioType" > 

<xs : restriction base="xs ipositivelnteger" > 
<xs : enumeration value="l"/> 
<xs : enumeration value="2"/> 
<xs : enumeration value="3"/> 
</xs : restriction> 
</xs : simpleType> 

<xs : simpleType name="ACListType" > 

<xs:list itemType="xs : string" /> 
</xs : simpleType> 

<xs : simpleType name="ACType" > 

<xs : restriction base="xs : string" > 

<xs : enumeration value="Controller"/> 
<xs : enumeration value="NonController"/> 
</xs : restriction> 
</xs : simpleType> 
</xs : schema> 

NOTE 1: The <xs:any> and <xs:anyAttribute> elements within the complex types allow for compatible standard 
extensions in future releases. 

NOTE 2: This document supports three values of the priority for the <RedirectionPrioType> element (High, 
medium and low). 
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Annex C (normative): 

Definitions of the PNIVI XCAP application usage 

XCAP requires an application usage to fulfil a number of steps in the definition of such application usage. The 
remainder of this annex specifies the required definitions of the PNM XCAP application usage. 

Application Unique ID (AUID): Each XCAP application usage is associated with a unique name called the 
Application Unique ID (AUID). The AUID defined by the PNM application usage falls into the vendor-proprietary 
namespace of XCAP AUID, where 3GPP is considered a vendor. 

The AUID allocated to the PNM XCAP apphcation usage is: 

pnm. 3gpp.org 

Default namespace: XCAP requires application usages to declare the default namespace. The default namespace of the 
PNM XCAP apphcation usage is: 

http : //uri . 3gpp . org/params/xml/pnm/xcap 

MIME type: The MIME type of PNM XML documents is: 

application/pnm+xml 

Naming conventions: By default, a PNM XML document is stored under the user's Home Directory (which is located 
under the "users" sub-tree). In order to facilitate the manipulation of a PNM XML document, the present document 
defines a default XML file name: 

pnm . xml 

XCAP root URI: The XCAP root defines all contexts in which all XCAP resources defined by the operator (e.g., an 
operator with a domain name of example.com) exist and the corresponding XCAP root URI is: 

xcap . example . com 

XCAP User Identify (XUI): Each user known to the XACP server is associated with a user name, called XCAP User 
Identifier (XUI), which is pre-configured at the PN UE. The XUI for PNM can be the shared public user identity used 
of the PN user. 

Validation Constraints: The <PNUEName> child elements of all <RedirectedUserID> and <RedirectingUserID> 
child elements of a <UERedirection> element shall have different values. 

The <PNUEName> child elements of all <ControllerUE> and <ControlleeUE> child elements of an <AccessControl> 
element shall have different values. 

Data Semantics: Data semantics are defined above. 

Resource Interdependencies: There are no resource interdependencies in this application usage beyond those defined 
by the schema. 

Authorization Policies: This application usage does not change the default authorization policy defined by XCAP. 
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